Re: denial-of-service attack prohibits all users from creating new

[Bruno Haible]

Hi Larry,

> Are these users actually working in a subdirectory of an existing CVS
> repository or is this a false positive?
> ... I'd like to know why they have a CVSROOT subdirectory in
> their current working directory or an ancestor of it

The four error messages from the four reports:
  Cannot initialize repository under existing CVSROOT: `/home'
  Cannot initialize repository under existing CVSROOT: 
`/home/rdieter1/cvs.fedoraproject.org'
  Cannot initialize repository under existing CVSROOT: 
`/pokerserver_test/pokersource'
  Cannot initialize repository under existing CVSROOT: `/usr/src/navit'

I don't know why they did it. All I know is that
  1) Once a user cd's into a subdirectory, the sibling directories of the
     parent, grandparent etc. directory should not matter any more. That's
     the normal expectation about functioning of programs.
  2) This error messages was not present in previous versions of 'cvs'.

Bruno