diff options
| author | John Albietz <inthecloud247@gmail.com> | 2014-12-28 12:05:04 -0600 |
|---|---|---|
| committer | John Albietz <inthecloud247@gmail.com> | 2014-12-28 12:05:04 -0600 |
| commit | d9e0bbcc4fd018e74f72cc6fe3b09f4c81870c91 (patch) | |
| tree | a7ec33b1f6517695a538489d536b64ebc7033f80 /src | |
| parent | 3e6b29f8ad1ddfcb134d743a66ee5f467e16c350 (diff) | |
| download | rust-d9e0bbcc4fd018e74f72cc6fe3b09f4c81870c91.tar.gz rust-d9e0bbcc4fd018e74f72cc6fe3b09f4c81870c91.zip | |
Update curl flag and add additional two-step installation instructions.
Updating curl flag and instructions to follow better security practices used by other projects: https://github.com/saltstack/salt-bootstrap Other references: http://www.reddit.com/r/linux/comments/1s58my/please_stop_piping_curl1_to_sh1/ http://www.seancassidy.me/dont-pipe-to-your-shell.html https://news.ycombinator.com/item?id=8550511 http://output.chrissnell.com/post/69023793377/stop-piping-curl-1-to-sh-1 http://www.reddit.com/comments/1pqtcb
Diffstat (limited to 'src')
| -rw-r--r-- | src/doc/guide.md | 11 |
1 files changed, 8 insertions, 3 deletions
diff --git a/src/doc/guide.md b/src/doc/guide.md index 22cbd18a865..6749995a766 100644 --- a/src/doc/guide.md +++ b/src/doc/guide.md @@ -23,11 +23,16 @@ Linux or a Mac, all you need to do is this (note that you don't need to type in the `$`s, they just indicate the start of each command): ```bash -$ curl -s https://static.rust-lang.org/rustup.sh | sudo sh +curl -L https://static.rust-lang.org/rustup.sh | sudo sh ``` -(If you're concerned about `curl | sudo sh`, please keep reading. Disclaimer -below.) +If you're concerned about the [potential insecurity](http://curlpipesh.tumblr.com/) of using `curl | sudo sh`, +please keep reading and see our disclaimer below. And feel free to use a two-step version of the installation and examine our installation script: + +```bash +curl -L https://static.rust-lang.org/rustup.sh -o rustup.sh +sudo sh rustup.sh +``` If you're on Windows, please download either the [32-bit installer](https://static.rust-lang.org/dist/rust-nightly-i686-pc-windows-gnu.exe) |