On 2015/05/03 19:49, Ken.Dickey wrote:
> Perhaps src.tar.gz should follow the common pattern...

This would help this problem (which I've done myself before) but loses
a valuable learning experience: never untar files to a system directory
like this (or even your home directory, etc) if you haven't checked the
contents.

Say this file (which is probably downloaded over http without any
authentication/verification) had src/ prefixes and you unpack in /usr.
But somewhere tucked away in the middle of the file is a malicious
lib/libc.so.* file that overwrites your real one and introduces a
hole. That wouldn't be good...

It's always safer to untar in a newly created or scratch directory.

Reply via email to