Re: [Gnu-arch-users] Re: Default version for star-merge (and more)

[Aaron Bentley]

Ron Parker wrote:

> I vaguely recall someone requesting aliases stored in {arch} at one
> point and I would be against that (at least in naive form). It could
> limit competition and create some form of central authority.

I don't see that as a form of central authority.  In fact, neither do 
you, because you present the 'security-risk' argument.

> Even
> worse there would be the potential for a foreign changeset to redirect
> the alias to a different archive, which I would consider somewhat of a
> security issue, 

See, if *anyone*'s foreign changeset can change your "{arch}/=aliases", 
you've got anarchy, not central authority.  Central authorities are bad 
when they have powers not granted to the peons, but if any Tom, Jim or 
Bob can change the =aliases, that doesn't apply here.

My implementation of tree-local aliases has +aliases superceding 
=aliases, if present.

I suppose a way around the security issue is to *always* have an 
+aliases, and require the user to do something to copy aliases from 
=aliases to +aliases.

Aaron

--
Aaron Bentley
Director of Technology
Panometrics, Inc.