[Savannah-hackers-public] CVS pserver

[Sylvain Beucler]

Hi,

I'm considering adding pserver access to CVS, that would run as
nobody.

The main issue is that it requires a complete list of acceptable
repositories, which, with our 2400 projects, triggers limitation in
the command line length.

One solution is to patch CVS, either to get the list from a file,
either to match the target repository against a regexp. I have a (very
old) patch for the former, used a long time ago at Savannah
(attachement in bug #7!), but against cvs 1.10 :)

The other solution is the following code: it analyses the pserver
authentication block for a valid /cvsroot, then delegates the rest of
the processing to 'cvs server'. Strength: independent code, no need to
patch. Also no flaw in CVSROOT/config is exploitable. Weakness: two
processes launched per request instead of one with a patched
pserver. I wrote it in C for efficiency, it just lacks a test suite
before being used.

Comments?

-- 
Sylvain

pserver.c
Description: Text Data