In pacman-git commit d8717a6a9666ec80c8645d190d6f9c7ab73084ac makepkg
started checking that the setuid/setgid bit could be removed on the
$BUILDDIR in order to prevent this propagating to the packages
themselves. Unfortunately, this requires the temporary builddir used
during the --verifysource st
On Sun, 18 Mar 2018 01:46:44 -0400,
Eli Schwartz via arch-projects wrote:
>
> In pacman-git commit d8717a6a9666ec80c8645d190d6f9c7ab73084ac makepkg
> started checking that the setuid/setgid bit could be removed on the
> $BUILDDIR in order to prevent this propagating to the packages
> themselves.
On 03/26/2018 06:19 PM, Luke Shumaker wrote:
>> -chmod 1777 "$builddir"
>> +chown "$makepkg_user:$makepkg_user" "$builddir"
>
> $makepkg_user isn't nescessarily a valid group name. Not all users
> have an identically named group, some people like to use 'users' as
> their primary group.
>
