Re: CVSROOT write permission vulnerability

[Eric Siegerman]

On Wed, Jan 22, 2003 at 03:55:15PM +0100, Fabian Cenedese wrote:
> >I'm starting to wonder if removing :local: mode might not be a bad
> >thing.

That's a bit extreme, IMO.  At most it could be disabled by
default, with an option to enable it (either a configure option,
or in CVSROOT/config, or both).  Not a flat-out prohibition, but
people would have to work a bit to find it.

> The only thing you could possibly imagine is to
> disable local mode on network mapped drives.

That'd be nice.  Rather a challenge to implement though -- how
*does* one tell, portably and from application code, whether a
given directory is locally or remotely mounted?

> But while working
> on my local drive I don't want to mess with any server stuff.

Indeed!  I might not even have any "server stuff" set up yet by
the time I want to start using CVS.

--

|  | /\
|-_|/  >   Eric Siegerman, Toronto, Ont.        address@hidden
|  |  /
Just Say No to the "faceless cannonfodder" stereotype.
        - http://www.ainurin.net/ (an Orc site)