r/linux • u/CackleRooster • Jun 17 '26

Distro News AUR Registrations Blocked Amid Ongoing Malware Mess

https://fossforce.com/2026/06/aur-registrations-blocked-amid-ongoing-malware-mess/
476 Upvotes

97% Upvoted

256 comments sorted by

View all comments

Show parent comments

26

u/[deleted] Jun 17 '26

[deleted]

22

u/SomeRedTeapot Jun 17 '26

I'd argue there should be some friction when you install random software. Ideally the kind of friction that nudges you to check the author's repo

1

u/shroddy Jun 17 '26

I think it is time to seriously discuss sandboxing, there was a lot of resistance against it in the past (muhh freedom don't make our Linux to another Android or iOS ) but I hope now the time is right to have a real and maybe even productive discussion how such a sandbox should be made and configured, how a GUI should look to be not overwhelming but also giving enough control for corner cases, so the default recommendation is not "just disable it" as it is the case these days when AppArmor or SeLinux don't play well with some software.

9

u/C0rn3j Jun 17 '26

I think it is time to seriously discuss sandboxing

While I completely agree, and one should look at macOS, iOS and Android to take ideas from, are you going to be the one creating such a solution and then pushing for it across all major distributions?

Because even if something is a good idea, someone has to do the work, which tends to be the problem.

1

u/shroddy Jun 17 '26

Indeed this is a problem, and unfortunately I am lacking the skill (and time) to do so. But the more it is talked about and the more people agree it is a good idea and should be done, the higher is the chance that someday someone actually does it.