Hi! * David Prévot <[email protected]> [2011-05-24 01:03:55 CEST]: > Le 23/05/2011 18:37, Javier Fernández-Sanguino Peña a écrit : > > This might be related to the Alioth update, could someone please confirm > > they > > get also this when comitting stuff: > > Confirmed, I already warned on #alioth Saturday, and again before they > sent their third update on dda, but they must have been overwhelmed with > other changes.
The thing here is, suid perl is long deprecated and will get removed in the future. We should see this as a chance to get that fixed now already (unless we are confident enough that we will have replaced CVS by the release time of wheezy, but even then it might make sense to invest here). I just checked on vasks in /cvs/webwml/CVSROOT, all the files are sgid scm_webwml, and that is our issue. cvs -d:ext:[email protected]:/cvs/webwml co CVSROOT Gives you the content of that directory, and you'll find four perl scripts in there which either needs to get replaced with different language or wrapper scripts that call them. I wonder if a wrapper script like this is safe: $ cat commit_prep2-shell-wrapper #!/bin/sh /cvs/webwml/CVSROOT/commit_prep2 $* If this is considered acceptable we could commit that for the four scripts and replace the calls in commitinfo and loginfo script (and add them to the checkoutlist). Thoughts? Different approach? Rhonda -- Fühlst du dich mutlos, fass endlich Mut, los | Fühlst du dich hilflos, geh raus und hilf, los | Wir sind Helden Fühlst du dich machtlos, geh raus und mach, los | 23.55: Alles auf Anfang Fühlst du dich haltlos, such Halt und lass los | -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: http://lists.debian.org/[email protected]
