Re: [Gnu-arch-users] multiple committers, again

[Martin Langhoff]

Robert,

I am going through the same issues, but with the view that it is
approachable. We have come to get used to the tradeoffs in other SCMs
(I have accepted/endured a fair share with CVS). The mechanisms and
tradeoffs are different with tla.

Some notes on your alternatives...

On Tue, 24 Aug 2004 15:57:32 -0500, Robert Anderson <address@hidden> wrote:
> 0) set a umask which doesn't strip g+w in startup files
> 1) use a shared account

Those are the options I would focus on. The umask option is in fact a
combination of a sticky group ownership plus a suitable umask. For
"local" users, someone has posted a minimalistic shell wrapper that
sets the umask (rather than in your startup file!).

For remote users using sftp, you should be able to tell the sftp
server to enforce the umask in the Arch repository directory.

> shared accounts are expressly forbidden

Shared accounts are still a good idea for repositories with remote
access. The account should be an 'sftp-only' account, which is
hopefully reasonable to ask for. Set /bin/false for the shell and
restrict it from sshd_config to only sftp. Can't do any damage like
that ;)

regards,






martin