Re: cvs commit as root

[Larry Jones]

Harry Putnam writes:
> 
> But I'm curious what you mean by `anonymous' root commits.  Not sure I
> know what that means.

Because root is usually a shared account, you don't know who actually
did the commit if you allow root commits -- they're essentially
anonymous.

> Also what problems are likely to occur by
> allowing root commits.  I take it there is some concerns beyond the
> normal ones of running around as root for no good reason.

Just the usual concerns applied to the fact that CVS was designed with
more emphasis on usability than security and thus provides lots of
opportunities for exploits.

-Larry Jones

I don't want to be THIS good! -- Calvin