Re:Running an independent Arch Linux rebuilder
by saghm on Tuesday April 21, 2020 @07:39PM
(#22940484)
I think they intended the phrase as a question; they're proposing that a maintainer should not just ask "is there obvious malware in this package?", but also several other questions (which they list afterwards).
Re:Running an independent Arch Linux rebuilder
by Bnshsysjab on Wednesday April 22, 2020 @04:16AM
(#22943341)
This is the correct interpret
I know Arch has: https://wiki.archlinux.org/index.php/Arch_Security_Team
but I'd be really interested to hear that the official packages have obvious malware.