From: Linas Vepstas <[EMAIL PROTECTED]>
Subject: import & commitinfo
Date: Tue, 4 Apr 2000 15:52:41 +0900 (JST)

  | >Description:
  |         Any anonymous user may import new projects into cvs, via the
  |         pserver network server, without any sort of check (that I can

$CVSROOT/CVSROOT/{readers,writers} can {block,allow} importing
by specified user.  Therefore, this issue is no security hole.
This is a non-serious implementation fault.

--
KOIE Hidetaka <[EMAIL PROTECTED]>

Reply via email to