On Mon, Jun 15, 2009 at 2:38 PM, Daniel Spiewak <djspie...@gmail.com> wrote:

> > And I agree about the "convenience install pack" of JRuby
> > having no notion of security practices. It's the equivalent of getting a
> > Linux box and running IE8 as your default browser.
>
>
> Not to take things too far off-topic, but I'm not sure how JRuby's
> non-global installation could be considered insecure or bad practice in any
> way.  I run numerous tools and utilities from within userspace just out of
> convenience.  If I were to install JRuby on a multi-user box or server (and
> I have), then I would probably stick it in /opt and chown it to root.
>  JRuby
> works fine in this case, I would simply need to use sudo whenever using gem
> (just as with MRI).
>
> So, I guess I'm not sure what you're saying here regarding JRuby's lack of
> security practices, seeing as it is every bit as capable as MRI in terms of
> install configuration, but with the added benefit of allowing non-global
> installations without fuss.


I'm not sure what non-global has to do with it (or even what it means).

>From the jruby.org web site (but also just about any other JRuby
documentation I read):

1. Extract JRuby into a directory.
2. Add that directory's bin subdirectory to the end of your path.
3. Test it: jruby -v

They expect you to add a user writable directory to your path.

You can, and should, chown that directory or use apt or macports (either one
will set owner/permission for you), but that's not what the homepage
advocates. There's no bundled installer to do it for you.

Assaf


>
>
> Daniel
>

Reply via email to