Skip to content

Comment on AURpocalypse now: a look at the recent AUR attacksparent

Comments

I use Gentoo. You have to specifically install "overlays" and every package maintainer would make their own overlay. You can't easily take over an overlay without the original person's permission.

That being said, still one namespace. Once you add an overlay it can replace any package it wants.

It's also Gentoo so too hard for most people to figure out.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.