Hi, soory but let me interrupt. On Tue, Feb 03, 2004 at 12:38:01AM +0100, Javier Fern�ndez-Sanguino Pe�a wrote: > Hi, > > Following the instructions post-compromise, and even if a bit late, the > DDP CVS has been checked by different members of the project [1]. The HEAD > branch has been checked, and the full history of only some of the scripts. > There's no indication of any suspicious change so I would like to ask, on > behalf of the DDP team, the restoration of the service. Notice that we > would just like the CVS restored to its former location, pserver access > should not be enabled. > > Since there is a cron job at klecker which extracts the CVS and runs > scripts on it (at least 'make publish') we would also like the cron job to > be reenabled (if it has been stopped). > > Notice the DDP data will be moved to Alioth [2] in the short or mid-term > [3]. So we would also like some input in how does debian-admin that would > be setup considering that more users than the former 52 will probably have > access to the DDP and that brings some security concerns [4]. > > Some ideas have popped up in the mailing list, such as having gluck CVS be > merged manually by DD from Alioth's, or setting up a Makefile-only CVS at > gluck that recovers sgml data from Alioth [4]. Having the cronjob at > klecker run chrooted would be sensible too. > > We would need help setting up this transition though, since none of us > (well, maybe Joy, but he's busy atm) can make those changes at > gluck/klecker.
I think we still need to close minor details before asking to restore CVS as is. Let us agree on a tar ball which will be put onto cvs.debian.org for DDP. If possible, I would like to use this opportunity to clean up CVS and do some reorganization if others agree. Osamu
