[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Savannah-hackers] address@hidden: subversions:/etc/group -- recent
|
From: |
Loic Dachary |
|
Subject: |
Re: [Savannah-hackers] address@hidden: subversions:/etc/group -- recent changes] |
|
Date: |
Tue, 19 Mar 2002 10:34:37 +0100 |
Mark H. Weaver writes:
> Something went wrong with subversions... A bunch of invalid lines got
> added to /etc/group somehow...
It was a nice buffer overflow. The anoncvs group grew over 12k and
usermod started to split it. I reduced the anoncvs list of people. Being
in the anoncvs group allows people to use the cvs admin command. By default
all people were granted this privilege. However only very few actually use
it. The savannah user preferences now offer to use the cvs admin command
and when people register it is turned off.
Cheers,
--
Loic Dachary http://www.dachary.org/ address@hidden
12 bd Magenta http://www.senga.org/ address@hidden
75010 Paris T: 33 1 42 45 07 97 address@hidden
GPG Public Key: http://www.dachary.org/loic/gpg.txt