3 ms·
It's not really different than downloading a .msi or .exe installer on Windows and running it. Or downloading a .pkg installer on macOS and running it (or runni
by cbarrick 9mo ago
It's not really different than downloading a .msi or .exe installer on Windows and running it. Or downloading a .pkg installer on macOS and running it (or running a program supplied in a .dmg). Or downloading a .deb or .rpm on Linux and running it.
It's all whether or not you trust the entity supplying the installer, be it your package manager or a third party.
At least with shell scripts, you have the opportunity to read it first if you want to.
- LoganDark 9mo agoIt is different: you give it sudo immediately so it doesn't have to ask. Of course, many installers ask for administrator access anyway...
- cbarrick 9mo agoI don't think it's functionally different if you write sudo on the command line or if the installer uses sudo in the script. As you said, most installers need to place binaries in privileged locations anyway.