All,

gentor's package() runs sudo ./setup, executing a downloaded closed-
source binary as root outside fakeroot. Nothing is installed into
$pkgdir. The binary cannot be reviewed. The shipped artifact is v0.2
while pkgver=0.3.gentor

This does not look right to me. It is the same structural defect as
hyprland-fixes: sudo in a build script to escape the packaging sandbox.

Best and cheers
Andreas

Reply via email to