On: A Generation Lost in the Bazaar (2012)

[ashitlerferad]

GNU Make allows arbitrary code execution during the build.

[TeMPOraL → ashitlerferad]

What's the problem with that, exactly?

[Annatar → ashitlerferad]

You bet it does, and that's exactly what's needed! What's the problem with that, again?

[qwertyuiop924 → Annatar]

Yep. If you're running it for a build, you're running unprivilaged - chrooted, jailed, or zoned if you want to be really safe - and if you're running it for install, than you trust the software in any case. And because makefiles are fairly transparent, you can check what the install is doing beforehand.