Skip to content
  • Allan McRae's avatar
    libmakepkg: reproducibilty for python packages · 1c5a5688
    Allan McRae authored
    
    
    Arch Linux has been setting PYTHONHASHSEED=0 to create deterministic
    .pyc files.  After a thorough review by the Arch Security Team, setting
    this variable was determined not to generated vulnerable .pyc files, as
    when the loader loads the .pyc file and unmarshalls it, the internal
    runtime will just populate the unordered data structures and use a new
    runtime hash for them.
    
    Signed-off-by: default avatarAllan McRae <allan@archlinux.org>
    1c5a5688