bug-cvs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: Patch: Add support for CVS_USER environment variable


From: Jim.Hyslop
Subject: RE: Patch: Add support for CVS_USER environment variable
Date: Thu, 26 Feb 2004 17:33:40 -0500

M.E. O'Neill wrote:
> But, that said, rejecting the patch on the grounds that it allows  
> people to cheat will leave me a little concerned that the 
> maintainers  
> of CVS have some rather strange notions when it comes to security  
> aspects of the software they maintain, and that's rather worrisome.
Please re-read Derek's email. He isn't rejecting the patch on the basis of
security problems. Derek even admitted he could not think of an exploit via
the server protocol.

Derek is rejecting the patch because there is no accompanying documentation,
nor any accompanying unit tests.

-- 
Jim Hyslop 
Senior Software Designer 
Leitch Technology International Inc. (<http://www.leitch.com/>) 
Columnist, C/C++ Users Journal (<http://www.cuj.com/experts>) 






reply via email to

[Prev in Thread] Current Thread [Next in Thread]