[Savannah-hackers] Re: Plan for today

[Mathieu Roy]

Vincent Caron <address@hidden> said:

> Mathieu Roy wrote:
>>>
>>>   In theory, a malicious hacker could change the RCS file in place
>>>without you noticing on cvs updates. Although that's very tricky and
>>>there are plenty of other places with easier and more insteresting
>>>backdoors to install.
>> How so? Each time I make a cvs update, the RCS file on the server is
>> compared with my file. And if I do not have the exact same file, I'll
>> get a U, or even a C if edited the file.
>
>    I think I've been too suspicious on this item, forget it.
>
>> Apart from that I do not clearly understand your proposal. No change
>> that have been made to the server should impact the frontend part (how
>> so?)
>
>    That's true, we should have the frontend easily and quickly working.
>
>> For the backend, I guess that the change you'll have to made will not
>> be polished and portable enough to be commited in the savannah CVS in
>> a near future. So you can create a CVS for hacked backend, unlinked to
>> the savannah project itself, if you feel it necessary.
>
>    That's what I meant, there's an emergency for subversions, and I
> think you would prefer to defer discussions and maybe implementation
> issues about this chroot thing on the official Savannah tree later.

Exactly.


-- 
Mathieu Roy

  +---------------------------------------------------------------------+
  | General Homepage:           http://yeupou.coleumes.org/             |
  | Computing Homepage:         http://alberich.coleumes.org/           |
  | Not a native english speaker:                                       |
  |     http://stock.coleumes.org/doc.php?i=/misc-files/flawed-english  |
  +---------------------------------------------------------------------+