This is an edited copy of the e-mail I sent to Andreas on 30th June
2008.

This bug 466408 is not debian specific - and I think that the correct
course of action would be to point the user to the CVSNT newsgroup.
http://www.cvsnt.org/cgi-bin/mailman/listinfo/cvsnt
or
news://news.cvsnt.org/support.cvsnt

Bug 466408 does not have a clear feature request/resolutiuon identified
from my POV - except perhaps an offer that Barak is making to write
better documentation for the wiki?

CVSNT Server is not designed to be a 'drop in replacement' for CVS
Server - there are fundamental security issues with traditional CVS that
CVSNT overcomes that requires some planning and
installation/configuration on the part of the repository and server
administrators (the CVSNT client on the other hand is a drop in
replacement for CVS client).

CVSNT overcomes two major security holes in CVS 1) you can init a
repository in /etc (or anywhere) 2) the physical location of the repo is
published and disabling those features would need to involve the cvs
admin.  

If Barak wants 'non-priveleged' users to be able to create a repo, then
the root just needs to allow other=write access to /etc/cvsnt/PServer.  

I suppose Barak could be asking that /etc/cvsnt/PServer would support an
'include' syntax (CVSNT bug 5325) so that $HOME/PServer could be
included - provided it was set 'at the top' of the /etc/cvsnt/PServer
file then later settings for Audit/Port etc would override any user
settings, or just asking that the 'respository' definitions be in a
different file to the 'server settings' because perhaps the admin is OK
with users adding repos but not wanting them to alter the audit or port
(CVSNT bug 5326).

Regardless feature requests that are platform non-specific should be
discussed on the CVSNT forum so everyone can contribute.

I recommend this debian specific bug 466408 be closed.

Regards,


Arthur



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to