bugConcurrent Versions System - Bugs: bug #14900, "cvs server" doesn't...


bug #14900: "cvs server" doesn't handle --allow-root

Submitted by:  None
Submitted on:  Wed 02 Nov 2005 05:27:41 AM UTC  
Category:  None Severity:  3 - Normal
Item Group:  None Status:  Fixed
Privacy:  Public Assigned to:  Mark D. Baushke <mdb>
Open/Closed:  Closed Release: 
Fixed Release:  None Fixed Feature Release:  1.12.14

Add a New Comment (Rich Markup)

You are not logged in

Please log in, so followups can be emailed to you.


Tue 31 Jan 2006 06:42:59 PM UTC, comment #2:

Thanks. I'm waiting with anticipation for 1.12.14 release to ping folks to update it on my server.

Mon 28 Nov 2005 10:34:05 PM UTC, comment #1:

I suspect that the following patch may be what you want.
It includes some changes to sanity.sh, but does not yet
include any patches to the doc/cvs.texinfo files.

Suggested changes to the documentation for this feature
would be apprciated.

I am not sure if the changes to the primary-wrapper and
writeproxy-primary-wrapper scripts are really correct.
Previously the proot_arg was being ignored by the
rsh/ssh testing.

Mark D. Baushke <mdb>
Project AdministratorIn charge of this item.
Wed 02 Nov 2005 05:27:41 AM UTC, original submission:

"cvs server" accepts, but doesn't handle --allow-root option.
This is rather critical issue for securing shell account via OpenSSH for those, who should use only cvs service and nothing more.

There are several reports about this behavior and even some patches.

My host runs 1.12.9 and this restriction is not yet implemented. Do you plan to integrate it? If the answer is yes then when?




(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:

Attached Files
file #2564:  allow-root.patch added by mdb (5KiB - text/x-patch)


Depends on the following items: None found

Items that depend on this one: None found


CC list is empty


Do you think this task is very important?
If so, you can add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.




Follow 5 latest changes.

Date Changed by Updated Field Previous Value => Replaced by
2005-11-30 mdb StatusNone => Fixed
    Assigned toNone => mdb
    Open/ClosedOpen => Closed
    Fixed Feature ReleaseNone => 1.12.14
2005-11-28 mdb Attached File- => Added allow-root.patch, #3140

Back to the top

Powered by Savane 3.4