On Fri, 2003-05-02 at 20:44, Bret Comstock Waldow wrote: > > I can accept I don't need to be root to build rpms, but how often is it useful? An rpm is usually to install some software, and most of that seems to need to be root. Or am I displaying my naivete? Building RPMs as non-root is like security: you'll never know how useful it is until you get screwed. So, it may work just fine for a long time. But it's enough to stumble upon a bad spec file (or to change a good spec yourself to make it harmful) and you may end up with all sorts of trouble, starting with libraries spilled all over the filesystem, and ending up with spicy variations to "rm -rf /". The best method is to create a dedicated account only for package building. You have been warned. :-) -- Florin Andrei "When ideas fail, words come in very handy." - Goethe
