[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: denial-of-service attack prohibits all users from creating new repos
|
From: |
Bruno Haible |
|
Subject: |
Re: denial-of-service attack prohibits all users from creating new repositories |
|
Date: |
Tue, 1 Jun 2010 12:15:56 +0200 |
|
User-agent: |
KMail/1.9.9 |
Hi Mark,
> The only workaround would be to use chroot...
Nice idea. But no, 'autopoint' should not require superuser privileges to run.
> If there is sufficient demand, a '-f' option to force overwrite of an
> existing repository may be able to be added.
No one is trying to overwrite an existing repository. The problem is that the
'cvs init' command is looking at ../../../../../../.., a location far away
from the current directory in the file system, and giving it more importance
than the command line parameters.
Not "sufficient demand" so far? I have already pointed to 4 users who had the
problem.
Bruno