On 06/22/2017 10:41 AM, R0b0t1 wrote:
> 
> This is kind of troubling because much like Cabal it seems like the
> Rust package management system is insecure. Does the Firefox build
> process make use of it?
> 

It would be against our ebuild policy if it does so. The sources for a
package should be listed in SRC_URI and are downloaded and verified by
your Gentoo package manager. After that, network access is forbidden.


Reply via email to