[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Savannah-hackers] Have I missed a reason why commits to CVSROOT won
From: |
Jaime E. Villate |
Subject: |
Re: [Savannah-hackers] Have I missed a reason why commits to CVSROOT won't work? |
Date: |
Fri, 16 Jan 2004 17:45:04 +0000 |
User-agent: |
Mutt/1.5.4i |
On Thu, Jan 15, 2004 at 09:01:18PM +0000, Nic Ferrier wrote:
> As far as I can see these should be no different from any other
> commit.
there are a few files in CVSROOT, such as loginfo, that are executed
automatically when you commit something that does not happen in other
directories. A malicious user who could commit to CVSROOT could easily
attack the system.
Jaime