From: Dave Thomas <dave@...>
Date: 2004-08-13T21:41:50+09:00
Subject: Re: RubyForge project and gem distriubtion


On Aug 13, 2004, at 7:32, ts wrote:

>>>>>> "D" == Dave Thomas <dave@pragprog.com> writes:
>
> D> I'm surprised by people here claiming to be concerned about security
> D> who have their Ruby installation in /usr/local. If you are concerned
> D> about root installs, RUBY SHOULD NOT BE IN A ROOT-ONLY WRITABLE
> D> DIRECTORY.
>
>  How do you know that /usr/local is owned by root ?

Another good point: changing /usr/local to be writable by the install 
user would also solve the problem. Of source there would still be the 
nee for root access if installing suid programs, but...


Cheers

Dave