Re: [fossil-users] detecting site compromise

2012-03-05 Thread Richard Hipp
On Mon, Mar 5, 2012 at 7:50 PM, Leo Razoumov wrote: > On Mon, Mar 5, 2012 at 18:49, Richard Hipp wrote: > > On Mon, Mar 5, 2012 at 6:34 PM, Leo Razoumov > wrote: > >> > >> What happens if an attacker can shun artifacts, rebuild database, edit > >> commit messages, events, tickets, etc? > >> Fos

Re: [fossil-users] detecting site compromise

2012-03-05 Thread Leo Razoumov
On Mon, Mar 5, 2012 at 18:49, Richard Hipp wrote: > On Mon, Mar 5, 2012 at 6:34 PM, Leo Razoumov wrote: >> >> What happens if an attacker can shun artifacts, rebuild database, edit >> commit messages, events, tickets, etc? >> Fossil sync might happily pull compromised items into a local repo. >>

Re: [fossil-users] Behavior of rm, mv, and changes/extra

2012-03-05 Thread Mike Meyer
On Mon, 5 Mar 2012 18:12:15 -0500 Richard Hipp wrote: > On Mon, Mar 5, 2012 at 6:03 PM, Christopher Berardi > wrote: > > (n+2) Have a compile-time configuration option to choose what to > > build into fossil. For example, maybe I just want the 'core' > > vcs without the wiki, ui

Re: [fossil-users] detecting site compromise

2012-03-05 Thread Richard Hipp
On Mon, Mar 5, 2012 at 6:34 PM, Leo Razoumov wrote: > On Mon, Mar 5, 2012 at 18:25, Richard Hipp wrote: > > On Mon, Mar 5, 2012 at 6:14 PM, Leo Razoumov > wrote: > >> > >> In light of a recent Github compromise > https://lwn.net/Articles/485162/ > >> I am curious of how one can detect and repai

Re: [fossil-users] Behavior of rm, mv, and changes/extra

2012-03-05 Thread Christopher Berardi
On Mon, Mar 05, 2012 at 06:12:15PM -0500, Richard Hipp wrote: >On Mon, Mar 5, 2012 at 6:03 PM, Christopher Berardi >wrote: > > (n+2) Have a compile-time configuration option to choose what to > build into fossil. For example, maybe I just want the 'core' >

Re: [fossil-users] detecting site compromise

2012-03-05 Thread Leo Razoumov
On Mon, Mar 5, 2012 at 18:25, Richard Hipp wrote: > On Mon, Mar 5, 2012 at 6:14 PM, Leo Razoumov wrote: >> >> In light of a recent Github compromise  https://lwn.net/Articles/485162/ >> I am curious of how one can detect and repair a compromised fossil site?? > > The code that is already checked

Re: [fossil-users] detecting site compromise

2012-03-05 Thread Richard Hipp
On Mon, Mar 5, 2012 at 6:14 PM, Leo Razoumov wrote: > In light of a recent Github compromise https://lwn.net/Articles/485162/ > I am curious of how one can detect and repair a compromised fossil site?? > The code that is already checked in is cryptographically secure. Changing the code is as d

[fossil-users] detecting site compromise

2012-03-05 Thread Leo Razoumov
In light of a recent Github compromise https://lwn.net/Articles/485162/ I am curious of how one can detect and repair a compromised fossil site?? --Leo-- ___ fossil-users mailing list fossil-users@lists.fossil-scm.org http://lists.fossil-scm.org:8080/cg

Re: [fossil-users] Behavior of rm, mv, and changes/extra

2012-03-05 Thread Richard Hipp
On Mon, Mar 5, 2012 at 6:03 PM, Christopher Berardi wrote: > > (n+2) Have a compile-time configuration option to choose what to > build into fossil. For example, maybe I just want the 'core' > vcs without the wiki, ui, or bug-tracking. Or, maybe I just > want the vcs and

Re: [fossil-users] Behavior of rm, mv, and changes/extra

2012-03-05 Thread Christopher Berardi
On Tue, Feb 28, 2012 at 07:28:11AM -0500, Richard Hipp wrote: > I'm leaning more toward Fossil 2.0 that has a number of incompatible > changes to the command-line interface, such as having "fossil rm" and > "fossil mv" actually delete and rename the files. To be clear, the > repository file format

Re: [fossil-users] HTTP request on commit?

2012-03-05 Thread Stephan Beal
On Mon, Mar 5, 2012 at 6:39 PM, Stephan Beal wrote: > > http://fossil.wanderinghorse.net/repos/whio/index.cgi/json/timeline/wiki?limit=3 > > http://fossil.wanderinghorse.net/repos/whio/index.cgi/json/timeline/checkin?limit=3 > > http://fossil.wanderinghorse.net/repos/whio/index.cgi/json/timeline/

Re: [fossil-users] HTTP request on commit?

2012-03-05 Thread Stephan Beal
On Mon, Mar 5, 2012 at 3:24 PM, wrote: > Ok, thanks. I'll try to get something together with this. > You might also find some useful pieces in the JSON API, e.g. you can fetch the various timelines like this: http://fossil.wanderinghorse.net/repos/whio/index.cgi/json/timeline/wiki?limit=3 http:/

[fossil-users] fossil in RamDebugger

2012-03-05 Thread Ramon Ribó
Hello, RamDebugger is an IDE and Debugger for the TCL language. At the same time, it is a GUI for cvs and fossil. http://www.compassis.com/ramdebugger http://www.compassis.com/c/ramdebugger/index Completely unrelated to RamDebugger SCM capabilities with cvs and fossil, RamDebugger has

Re: [fossil-users] HTTP request on commit?

2012-03-05 Thread org.fossil-scm.fossil-users
On Mon, 5 Mar 2012 10:04:27 -0500 Richard Hipp wrote: > On Mon, Mar 5, 2012 at 8:49 AM, > wrote: > > That's not too bad, but it lacks some metadata we'd like. It also > > seems to lump all events (check-ins, tickets, etc) into one stream, > > so we'd have to somehow parse it and strip out anythin

Re: [fossil-users] fossil stash gdiff

2012-03-05 Thread Emil Totev
On Mon, Mar 5, 2012 at 3:47 PM, Richard Hipp wrote: > > > On Mon, Mar 5, 2012 at 8:29 AM, Emil Totev wrote: >> >> Hi >> >> This is fossil version 1.21 [002580c50d] 2011-12-13 13:53:56 UTC >> on Windows 7 SP1 >> >> I have configured winmerge as my gdiff-command and it works fine for me >> with `fo

Re: [fossil-users] HTTP request on commit?

2012-03-05 Thread Richard Hipp
On Mon, Mar 5, 2012 at 8:49 AM, wrote: > On Mon, 5 Mar 2012 09:23:47 -0500 > Richard Hipp wrote: > > On Mon, Mar 5, 2012 at 8:07 AM, > > wrote: > > > Ah, yeah, should have explained that. It's essentially just for a > > > notification service similar to that offered by CIA.vc. > > > > I'm not fam

Re: [fossil-users] fossil stash gdiff

2012-03-05 Thread Konstantin Khomoutov
On Mon, 5 Mar 2012 08:47:27 -0500 Richard Hipp wrote: [...] > > It seems the program is started with parameters like > > "/temp/xDjd8RXRlXyBTEo /temp/RgKiAnjkXUrB61Z", and I can see some > > temporary files like this created, but obviously winmerge cannot > > pick them up. > > > > Some things I d

Re: [fossil-users] HTTP request on commit?

2012-03-05 Thread org.fossil-scm.fossil-users
On Mon, 5 Mar 2012 09:23:47 -0500 Richard Hipp wrote: > On Mon, Mar 5, 2012 at 8:07 AM, > wrote: > > Ah, yeah, should have explained that. It's essentially just for a > > notification service similar to that offered by CIA.vc. > > I'm not familiar with CIA.vc. But if you just want notifications

Re: [fossil-users] HTTP request on commit?

2012-03-05 Thread Richard Hipp
On Mon, Mar 5, 2012 at 8:07 AM, wrote: > On Mon, 5 Mar 2012 08:55:04 -0500 > Richard Hipp wrote: > > > On Mon, Mar 5, 2012 at 7:44 AM, > > wrote: > > > Is there a way to get fossil to make an HTTP request to a given > > > address on commit (with information about the commit such as SHA1, > > > me

Re: [fossil-users] HTTP request on commit?

2012-03-05 Thread org.fossil-scm.fossil-users
On Mon, 5 Mar 2012 08:55:04 -0500 Richard Hipp wrote: > On Mon, Mar 5, 2012 at 7:44 AM, > wrote: > > Is there a way to get fossil to make an HTTP request to a given > > address on commit (with information about the commit such as SHA1, > > message, timestamp, etc)? > > > > What happens if the co

Re: [fossil-users] HTTP request on commit?

2012-03-05 Thread Richard Hipp
On Mon, Mar 5, 2012 at 7:44 AM, wrote: > Hello. > > I'm evaluating fossil as a replacement for existing git infrastructure. > One feature we do need is the ability to notify a server when a commit > occurs. > > Is there a way to get fossil to make an HTTP request to a given address > on commit (wi

Re: [fossil-users] fossil stash gdiff

2012-03-05 Thread Richard Hipp
On Mon, Mar 5, 2012 at 8:29 AM, Emil Totev wrote: > Hi > > This is fossil version 1.21 [002580c50d] 2011-12-13 13:53:56 UTC > on Windows 7 SP1 > > I have configured winmerge as my gdiff-command and it works fine for me > with `fossil gdiff`, however it doesn't work with `fossil stash gdiff`. > Wi

[fossil-users] HTTP request on commit?

2012-03-05 Thread org.fossil-scm.fossil-users
Hello. I'm evaluating fossil as a replacement for existing git infrastructure. One feature we do need is the ability to notify a server when a commit occurs. Is there a way to get fossil to make an HTTP request to a given address on commit (with information about the commit such as SHA1, message,

[fossil-users] fossil stash gdiff

2012-03-05 Thread Emil Totev
Hi This is fossil version 1.21 [002580c50d] 2011-12-13 13:53:56 UTC on Windows 7 SP1 I have configured winmerge as my gdiff-command and it works fine for me with `fossil gdiff`, however it doesn't work with `fossil stash gdiff`. Winmerge starts with an empty screen for each modified file. It see