bugConcurrent Versions System - Bugs: bug #14900, "cvs server" doesn't...

 
 

bug #14900: "cvs server" doesn't handle --allow-root

Submitted by:  None
Submitted on:  Wed 02 Nov 2005 05:27:41 AM UTC  
 
Category: NoneSeverity: 3 - Normal
Item Group: NoneStatus: Fixed
Privacy: PublicAssigned to: Mark D. Baushke <mdb>
Open/Closed: ClosedRelease: 
Fixed Release: NoneFixed Feature Release: 1.12.14

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Tue 31 Jan 2006 06:42:59 PM UTC, comment #2:

Thanks. I'm waiting with anticipation for 1.12.14 release to ping folks to update it on my server.

Anonymous
Mon 28 Nov 2005 10:34:05 PM UTC, comment #1:

I suspect that the following patch may be what you want.
It includes some changes to sanity.sh, but does not yet
include any patches to the doc/cvs.texinfo files.

Suggested changes to the documentation for this feature
would be apprciated.

I am not sure if the changes to the primary-wrapper and
writeproxy-primary-wrapper scripts are really correct.
Previously the proot_arg was being ignored by the
rsh/ssh testing.

Mark D. Baushke <mdb>
Project AdministratorIn charge of this item.
Wed 02 Nov 2005 05:27:41 AM UTC, original submission:

"cvs server" accepts, but doesn't handle --allow-root option.
This is rather critical issue for securing shell account via OpenSSH for those, who should use only cvs service and nothing more.

There are several reports about this behavior and even some patches.
http://ioctl.org/unix/cvs/cvs.diff
http://lists.gnu.org/archive/html/bug-cvs/2002-11/msg00061.html

My host runs 1.12.9 and this restriction is not yet implemented. Do you plan to integrate it? If the answer is yes then when?

Thanks.

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

Attached Files
file #2564:  allow-root.patch added by mdb (5kB - text/x-patch)

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 5 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Wed 30 Nov 2005 07:08:25 PM UTCmdbStatusNone=>Fixed
  Assigned toNone=>mdb
  Open/ClosedOpen=>Closed
  Fixed Feature ReleaseNone=>1.12.14
Mon 28 Nov 2005 10:34:05 PM UTCmdbAttached File-=>Added allow-root.patch, #3140

Back to the top


Powered by Savane 3.1-cleanup