This is the mail archive of the
gcc@gcc.gnu.org
mailing list for the GCC project.
Re: new batch of replies (D)
- From: "Joseph S. Myers" <jsm28 at cam dot ac dot uk>
- To: Tom Lord <lord at emf dot net>
- Cc: <gcc at gcc dot gnu dot org>
- Date: Tue, 10 Dec 2002 11:20:38 +0000 (GMT)
- Subject: Re: new batch of replies (D)
On Tue, 10 Dec 2002, Tom Lord wrote:
> Yes, but any compromise that can run arbitrary code with the p4d id
> can corrupt the repository.
The presumption is that the protocol used to communicate with the daemon
is as simple as possible and the daemon is well coded and audited (better
than cvs server). At present most users with write access (who don't
generally have shell access) can only communicate with the cvs server
protocol, but the restriction should apply to users with shell access as
well.
--
Joseph S. Myers
jsm28@cam.ac.uk