Re: Does any one know........

[Charles Galpin]

On Wed, 4 Oct 2000, Rick Forrister wrote:

> I make it a point to not install binary RPM's 
> unless they're from trusted sites, such as Red Hat, Caldera, etc.
> For other sites, I d/l the SRC rpms, open them up, inspect any
> scripts that are executed, and then rebuild/install. 

I see this said a lot. Isn't there still a risk when installing the src
rpm? In other words can't a src rpm also have a malicious install script
run? Unless you check out those scripts first, I don't see how this can be
considered safe.

Or am I missing something?

charles



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list