From owner-freebsd-security@FreeBSD.ORG Tue Jan 31 06:10:43 2006 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A53B816A420 for ; Tue, 31 Jan 2006 06:10:43 +0000 (GMT) (envelope-from duane@greenmeadow.ca) Received: from smtpout.eastlink.ca (smtpout.eastlink.ca [24.222.0.30]) by mx1.FreeBSD.org (Postfix) with ESMTP id 19A0F43D46 for ; Tue, 31 Jan 2006 06:10:42 +0000 (GMT) (envelope-from duane@greenmeadow.ca) Received: from ip02.eastlink.ca ([24.222.10.10]) by mta01.eastlink.ca (Sun Java System Messaging Server 6.2-4.03 (built Sep 22 2005)) with ESMTP id <0ITY0013T14Q7V61@mta01.eastlink.ca> for freebsd-security@freebsd.org; Tue, 31 Jan 2006 02:10:02 -0400 (AST) Received: from blk-224-199-230.eastlink.ca (HELO [192.168.0.101]) ([24.224.199.230]) by ip02.eastlink.ca with ESMTP; Tue, 31 Jan 2006 02:10:42 -0400 Date: Tue, 31 Jan 2006 02:10:39 +0000 From: Duane Whitty In-reply-to: <003101c62628$79daaf40$672a15ac@smiley> To: freebsd-security@freebsd.org Message-id: <43DEC71F.1020101@greenmeadow.ca> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii; format=flowed Content-transfer-encoding: 7BIT X-Accept-Language: en-us, en X-BrightmailFiltered: true X-Brightmail-Tracker: AAAAAQAAA+k= References: <003101c62628$79daaf40$672a15ac@smiley> User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.12) Gecko/20060120 Subject: Re: Is CVS security on topic for this list? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Jan 2006 06:10:43 -0000 Darren Pilgrim wrote: > From: Duane Whitty > >>I'm wondering about the security implications of running a CVS server >>with group write permission on the repository and various other >>configuration details. Is this an appropriate discussion for this >>list? If it is I have a setup I'd like some feedback on. If this is >>not the appropriate list please accept my apologies for the >>distraction. > > > If you're running on FreeBSD and want to discuss the security implications > of your configuration, I would say yes. If it were, me, however, I'd > probably try my luck on the GNU CVS mailing lists[1] first. Specifically, > the info-cvs list. > > [1] http://savannah.nongnu.org/mail/?group=cvs > > > > > Hi everyone, Well my subject then probably is on topic but first I will familiarize myself with some of the GNU CVS mailing lists. Darren, thanks for the great link. --Best Regards Duane Whitty