info-cvs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

WinCVS and problems with Directory based Access Control


From: Infoman: Martin Kretschmar
Subject: WinCVS and problems with Directory based Access Control
Date: Mon, 7 May 2001 15:36:21 +0200

Hello,

since CVS doesn't requires the suid bit set, it is a pretty
normal program. Thus the normal file protections for imple-
menting a directory based access control work should be very
easy to implement. For the test setup 'user1' should be able
to read and commit, 'user2' should just be able to read:

For Linux to Linux via remove shell this works like a charm:

  cvs -d ":ext:address@hidden:/data/cvshome"
    commit -m "" LibSub.htm
  address@hidden's password:
  Checking in LibSub.htm;
  /data/cvshome/GP/LibSub/LibSub.htm,v  <--  LibSub.htm
  new revision: 1.16; previous revision: 1.15
  done

  cvs -d ":ext:address@hidden:/data/cvshome"
    commit -m "" LibSub.htm
  address@hidden's password:
  Checking in LibSub.htm;
  /data/cvshome/GP/LibSub/LibSub.htm,v  <--  LibSub.htm
  new revision: 1.17; previous revision: 1.16
  cvs [server aborted]: could not open lock file
  `/data/cvshome/GP/LibSub/,LibSub.htm,': Permission denied

However with WinCVS and .rhosts identification things
start to look strange. Starting with 'user2' we geht:

  cvs commit -m "no message" LibSub.htm (in directory C:\GP\LibSub)
  Checking in LibSub.htm;
  /data/cvshome/GP/LibSub/LibSub.htm,v  <--  LibSub.htm
  new revision: 1.17; previous revision: 1.16
  cvs [server aborted]: could not open lock file
  `/data/cvshome/GP/LibSub/,LibSub.htm,': Permission denied

  NEW CVSROOT: address@hidden:/data/cvshome (.rhosts authentication)
  cvs commit -m "no message" LibSub.htm (in directory C:\GP\LibSub)
  Checking in LibSub.htm;
  /data/cvshome/GP/LibSub/LibSub.htm,v  <--  LibSub.htm
  new revision: 1.17; previous revision: 1.16
  cvs [server aborted]: could not open lock file
  `/data/cvshome/GP/LibSub/,LibSub.htm,': Permission denied

Restarting WinCVS and and having 'user1' as default gives:

  cvs commit -m "no message" LibSub.htm (in directory C:\GP\LibSub)
  Checking in LibSub.htm;
  /data/cvshome/GP/LibSub/LibSub.htm,v  <--  LibSub.htm
  new revision: 1.17; previous revision: 1.16
  done

  NEW CVSROOT: address@hidden:/data/cvshome (.rhosts authentication)
  cvs commit -m "no message" LibSub.htm (in directory C:\GP\LibSub)
  Checking in LibSub.htm;
  /data/cvshome/GP/LibSub/LibSub.htm,v  <--  LibSub.htm
  new revision: 1.18; previous revision: 1.17
  done

Restarting WinCVS again still allows 'user2' to commit:

  CVSROOT: address@hidden:/data/cvshome (.rhosts authentication)
  TCL is *not* available, shell is disabled
  cvs commit -m "no message" LibSub.htm (in directory C:\GP\LibSub)
  Checking in LibSub.htm;
  /data/cvshome/GP/LibSub/LibSub.htm,v  <--  LibSub.htm
  new revision: 1.19; previous revision: 1.18
  done

So we seems to have a sort of a "memory" effect in the NT to Linux
environment. Has this kind of error been encountered before? Any
ideas and/or suggestions are welcome. With SSH I encountered the
first problems of this kind.

Regards,
         Martin Kretschmar

Dipl.-Phys. Dr. Martin Kretschmar
Software Development Corporate Info Center
Infoman AG, Vaihinger Straße 169, D-70567 Stuttgart
Tel.: +49 711/67971-682, Fax: +49 711/67971-10
E-Mail: address@hidden






Dipl.-Phys. Dr. Martin Kretschmar
Software Development Corporate Info Center
Infoman AG, Vaihinger Straße 169, D-70567 Stuttgart
Tel.: +49 711/67971-682, Fax: +49 711/67971-10
E-Mail: address@hidden




reply via email to

[Prev in Thread] Current Thread [Next in Thread]