Re: [opensuse-factory] Re: [opensuse-kernel] libsigsegv build fail with kernel 3.18.3

From: Linus Torvalds <torvalds@linux-foundation.org>
To: Jan Engelhardt <jengelh@inai.de>
Cc: Takashi Iwai <tiwai@suse.de>,
	opensuse-factory@opensuse.org,
	OpenSUSE Kernel Team <opensuse-kernel@opensuse.org>,
	"linux-arch@vger.kernel.org" <linux-arch@vger.kernel.org>
Subject: Re: [opensuse-factory] Re: [opensuse-kernel] libsigsegv build fail with kernel 3.18.3
Date: Tue, 27 Jan 2015 14:32:11 -0800	[thread overview]
Message-ID: <CA+55aFzguEFfG2REN1soMC+0UJ7GtANfEvMoCNPt0QqmP9LKoA@mail.gmail.com> (raw)
In-Reply-To: <alpine.LSU.2.11.1501272309090.17818@nerf60.vanv.qr>

On Tue, Jan 27, 2015 at 2:14 PM, Jan Engelhardt <jengelh@inai.de> wrote:
>
> Sometimes I wish `make modules_install` would run the compile stage as well..
> just like `make install` does in autotooled projects.

This is just one more reason to hate autotools. It's shit.

You should *never* compile things as root. It's not just a bad idea in
that it leaves possible root-owned files in your project (which in
turn can make cleanup harder etc), but it is historically also an
actual security issue with the whole temporary file mess in /tmp and
various racy symlink-attacks.

So in general, you should try to teach people that "make install"
should never ever build anything. Because if it does, it's just a
broken code-flow. It may work, it may be convenient, and with proper
tools it _may_ even be secure, but it's still a really bad idea.

Sadly, I seem to be alone in my hatred of automake/configure/etc.

                          Linus