You must log in or register to comment.
Just don’t package it. And if you have to, sandbox it in Firejail or in Bubblewrap. Or just make Snap out of it.
My $0.05 reading of it is that they want to hose down the build servers and start clean, in case if the attacker escaped the sandboxing there.
That would make sense if they ran servers on non-LTS release. Do they do that?
They’re rebuilding all the newer builds “out of an abundance of caution.” The servers themselves obviously don’t run on experimental software.
This.
They dont run experimental software on their build servers.
