OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: cvs security problem
From: Brian Behlendorf (brianCOLLAB.NET)
Date: Tue Aug 01 2000 - 18:04:25 CDT

On Mon, 31 Jul 2000 samaAGLORIOSO.COM wrote:
> On Fri, Jul 28, 2000 at 02:20:42PM -0400, Kev wrote:
> > This has been the case for quite some time. It would be nice if CVS
> > could be made more secure, but it would probably take a lot of work.
> > --
> > Kevin L. Mitchell <klmitchmit.edu>
>
> Although I don't think it addresses this very problem, you might be
> interested in CVS-nserver (http://alexm.here.ru/cvs-nserver/), a
> rewrite of CVS to make it more modular and secure. I still haven't
> tried it myself, though.

There's another similar open source project in development that, if
implemented right, won't have this security problem, called Subversion
(http://subversion.tigris.org/). There are two full time people working
on it, with an ETA around September, but we could definitely use more
assistance.

        Brian