Re:Detecting the use of “curl – bash” server side
by rmc on Wednesday April 20, 2016 @08:49AM
(#11533953)
If you use checkinstall(1) it'll see what `sudo make install` would do, and create a local package that would do that (e.g. a deb on ubuntu). This package can then be installed in the usual manner, which gives you uninstallability, transactionality, and ensures you don't overwrite any other files installed via a package. This is much better than curl|bash.
[ Parent
| on HN ]
Re:Detecting the use of “curl – bash” server side
by Sean1708 on Wednesday April 20, 2016 @09:51AM
(#11534348)
Correct me if I'm wrong but can't you also run arbitrary code while installing packages?
Either way I'm not saying `curl | bash` is good, I'm just trying to point out that people have a very knee jerk reaction to it and pay no mind to things which are similarly as dangerous.