Re: Proposal: have client CVS send remote username to server CVS

[Larry Jones]

Greg A. Woods writes:
> 
> Many (most?) systems foolishly allow a process to regain its
> former privileges if great care is not taken, and on some I understand
> it is not even possible to prevent such re-instatement, thereby leaving
> CVS open to exploit throughout its entire body of un-audited code.

Most systems are not quite so foolish -- I've never heard of one that
didn't have an exception for root such that one you give it away you
can't get it back.

-Larry Jones

Well of course the zipper's going to get stuck if everyone
stands around WATCHING me! -- Calvin