Linked by Ben Mazer on Wed 15th Oct 2003 20:58 UTC
Linux A few months ago I was a Slackware Junkie. I loved it, and laughed at those who used 'more automatic' distributions (ok, I didn't actually laugh). Then Arch Linux 0.5 came out and I was very intrigued by it. I was getting tired of having to compile updated packages myself.
Permalink for comment
To read all comments associated with this story, please click here.
Security in Arch's 'Incoming' solder
by marin_linuxer on Wed 15th Oct 2003 17:55 UTC

Yes, it _is_ true that anyone can contribute to the 'incoming' folder --- however, all packages are screened by designated 'maintainers' before they are migrated into the 'Official/Unofficial/Unstable' folders. Use the 'Incoming' folder 'At Your Own Risk'. But, since all submitted packages contain the entire 'build' scripts, you can easily re-build on your own system rather than accept an unknown binary. It is as simple as downloading the package, untarring, and 'makepkg'.

If your to afraid to risk that, then, stay with the 'official' repositories or compile on your own. This is _NOT_ a distro for fence-riders or the squeemish, IMHO. You'll either end-up with one of the most elegent/fast systems you've ever had(for little effort) _OR_ you'll learn a whole lot you'd never have had the chance in the more 'automated' distro's.

Choice.(sums it up best, I think)

Cheers.