bugConcurrent Versions System - Bugs: bug #14900, "cvs server" doesn't...

 
 

bug #14900: "cvs server" doesn't handle --allow-root

Submitter:  None
Submitted:  Wed 02 Nov 2005 05:27:41 AM UTC
 
Category:  None Severity:  3 - Normal
Item Group:  None Status:  Fixed
Privacy:  Public Assigned to:  mdb
Open/Closed:  Closed Release: 
Fixed Release:  None Fixed Feature Release:  1.12.14
* Mandatory Fields

Add a New Comment (Rich Markup)
   

Comment Type & Canned Response:
       No canned response available

 

Tue 31 Jan 2006 06:42:59 PM UTC, comment #2: 

Thanks. I'm waiting with anticipation for 1.12.14 release to ping folks to update it on my server.

Anonymous
Mon 28 Nov 2005 10:34:05 PM UTC, comment #1: 

I suspect that the following patch may be what you want.
It includes some changes to sanity.sh, but does not yet
include any patches to the doc/cvs.texinfo files.

Suggested changes to the documentation for this feature
would be apprciated.

I am not sure if the changes to the primary-wrapper and
writeproxy-primary-wrapper scripts are really correct.
Previously the proot_arg was being ignored by the
rsh/ssh testing.

Mark D. Baushke <mdb>
Project Administrator
Wed 02 Nov 2005 05:27:41 AM UTC, original submission:  

"cvs server" accepts, but doesn't handle --allow-root option.
This is rather critical issue for securing shell account via OpenSSH for those, who should use only cvs service and nothing more.

There are several reports about this behavior and even some patches.
http://ioctl.org/unix/cvs/cvs.diff
http://lists.gnu.org/archive/html/bug-cvs/2002-11/msg00061.html

My host runs 1.12.9 and this restriction is not yet implemented. Do you plan to integrate it? If the answer is yes then when?

Thanks.

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #2564:  allow-root.patch added by mdb (5KiB - text/x-patch)

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

Only logged-in users can vote.

 

 

 

 

Follow 5 latest changes.

Date Changed by Updated Field Previous Value => Replaced by
2005-11-30 mdb StatusNone Fixed
    Assigned toNone mdb
    Open/ClosedOpen Closed
    Fixed Feature ReleaseNone 1.12.14
2005-11-28 mdb Attached File- Added allow-root.patch, #3140

Back to the top


Powered by Savane 3.9