cvs-nserver-devel

New version of CVS permissions patch - security fix

[Alexey M. <al...@hs...>]

>>>>> "CM" == Corey Minyard <mi...@ac...> writes:

CM> 2001-09-21 Corey Minyard <mi...@ac...>

CM>          * src/admin.c: Changed the admin command to only require
CM> write access, not owner access.

By the way, I've simply disabled the 'admin' subcommand in remote mode
:)

--alexm

Re: New version of CVS permissions patch - security fix

[Corey M. <mi...@ac...>]

Alexey Mahotkin wrote:

>>>>>>"CM" == Corey Minyard <mi...@ac...> writes:
>>>>>>
>
>CM> 2001-09-21 Corey Minyard <mi...@ac...>
>
>CM>          * src/admin.c: Changed the admin command to only require
>CM> write access, not owner access.
>
>By the way, I've simply disabled the 'admin' subcommand in remote mode
>:)
>
>--alexm
>
Most of admin is useless, but if you forget to set a file binary (-kb) 
when you
add it, you need the admin command to set that option.  So you might 
consider
adding that one function back.  Also, if you use locking, you need the admin
command.  Really, admin is a big glob of unrelated functions and needs to be
split up, but that's another story.

-Corey