这是indexloc提供的服务,不要输入任何密码
Skip to content

precreate arbitrary code execution #276

@baszalmstra

Description

@baszalmstra

While porting the code to Rust I came across the precreate field. If I read the code correctly this allows executing arbitrary code at installation time which is a security risk. I am on personal vendetta against this in conda (link scripts too). 😺

I could not find a use of this in any conda-forge feedstock so I was wondering what the usecase for this would be?

Would it be possible to do achieve the same result without executing arbitrary code?

Metadata

Metadata

Assignees

No one assigned

    Labels

    stale[bot] marked as stale due to inactivity

    Type

    No type

    Projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions