Re: anonymous cvs init.

[Tanaka Akira]

In article <address@hidden>,
  address@hidden (Larry Jones) writes:

> There's no need.  If you're using anonymous cvs, you must be running
> pserver which doesn't allow access to any repository that it doesn't
> know about (via the --allow-root command line option in inetd.conf). 
> Running init on an existing repository is perfectly safe -- it won't
> destroy or modify any existing data.  At most it will create any missing
> administrative files with just comments in them.

But it is possible to initialize a repository other than specified by
--allow-root.

% cvs -v

Concurrent Versions System (CVS) 1.11.1.1 (client/server)

Copyright (c) 1989-2001 Brian Berliner, david d `zoo' zuhn, 
                        Jeff Polk, and other authors

CVS may be copied only under the terms of the GNU General Public License,
a copy of which can be found with the CVS distribution kit.

Specify the --help option for further information about CVS
% cvs -d /tmp/y init
% echo anonymous > /tmp/y/CVSROOT/readers          
% echo anonymous::akr > /tmp/y/CVSROOT/passwd 
% cvs --allow-root=/tmp/y pserver
BEGIN AUTH REQUEST
/tmp/y
anonymous
A
END AUTH REQUEST
cvs: setgroups: Operation not permitted
I LOVE YOU
init /tmp/x
ok

Is it perfectly safe?
-- 
Tanaka Akira