Re: CVS 1.11 & modules file: Cederqvist bug

[Steve James]

Pascal,

My thanks for your reply. 

I agree with you: it's more sensible for all CVS scripts to run on the 
server, and that this is therefore a documentation bug. Presumably it was 
once correct for a previous version of CVS.

I saw your following post on the subject too. I wonder if the presence of 
Checkin.prog and Update.prog are just history too. They can now be considered 
redundant with the current CVS behavior, since the configuration settings in 
the modules file can be honored by the server without use of these support 
files. However CVS' use of Checkin.prog and Update.prog have two 
consequences:-

1. They are created on checkout; a new change to the modules configuration 
does not change old working copies. This may or may not be desirable.

2. They can be modified locally to alter what script is run on the server 
(I've successfully tried this with pserver). This may also be useful (?) but 
it's certainly a security hole which the repository administrator may not be 
aware of -- especially with the confusing documentation!

Steve.