• everett@lemmy.ml
    link
    fedilink
    arrow-up
    9
    ·
    13 hours ago

    It’s worth knowing that .deb files can contain setup scripts that get run as root when installed, so you should trust them too.

    • 👍Maximum Derek👍@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      6
      ·
      edit-2
      34 minutes ago

      Yeah. They all come with risks, but I psychologically struggle to run shell scripts unless I know what’s in them. And the same brain dysfunction makes my automatically distrust a script that doesn’t set pipefail.

      • everett@lemmy.ml
        link
        fedilink
        arrow-up
        4
        ·
        12 hours ago

        That definitely makes sense. Also, the scripts in a .deb should be incredibly short and readable, if you choose to check them out.