Package: cvs Version: 1:1.12.9-13 Severity: normal I noticed that Debian CVS package installs all repository files owed by group src. Quoted from http://ftp.debian.org/doc/base-passwd/users-and-groups.html:
"This group (src) owns source code, including files in /usr/src. It can be used locally to give a user the ability to manage system source code." As I understand (and always saw in many years as a Debian personal / professional user / developer) the src group stands for system source code (not user source code). CVS code may not be part of system source code, but code from other projects. At my company for example, I host CVS files from clients. As the policy states, src group members should not be able to write these client files. The truth is: I assumed as I said because http://www.debian.org/doc/debian-policy/ch-opersys.html#s9.2 says nothing about what groups are and http://ftp.debian.org/doc/base-passwd/users-and-groups.html makes it no crystal clear what src group stands for and also /usr/share/doc/cvs/README.Debian says nothing about any group policy. I may be wrong, but I believe at least the policy should be clearer at this point or at least CVS package warn the admin that src group members will have full CVS access. Hope this can help other users. Thank you very much for your time and patience. -- System Information: Debian Release: 3.1 Architecture: i386 (i686) Kernel: Linux 2.6.8-3-686 Locale: LANG=pt_BR, LC_CTYPE=pt_BR (charmap=ISO-8859-1) Versions of packages cvs depends on: ii debconf 1.4.30.13 Debian configuration management sy ii libc6 2.3.2.ds1-22sarge4 GNU C Library: Shared libraries an ii libpam-runtime 0.76-22 Runtime support for the PAM librar ii libpam0g 0.76-22 Pluggable Authentication Modules l ii zlib1g 1:1.2.2-4.sarge.2 compression library - runtime -- debconf information: cvs/pserver_repos_individual: true * cvs/pserver_setspawnlimit: false cvs/rotatekeep: 7 * cvs/badrepositories: create cvs/rotatekeep_individual: 7 * cvs/pserver_repos: all * cvs/pserver: true cvs/cvs_conf_is_dead: * cvs/repositories: /var/lib/cvs/infra:/var/lib/cvs/prod * cvs/rotatekeep_nondefault: no cvs/rotate_individual: true cvs/pserver_spawnlimit: 400 * cvs/rotatehistory: yes -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
