On 06 03 2003 10:22, George Danchev wrote:
> Hi,
> ima li nqkoj kojto mozhe da testi i report-ne kak se cron-va, sync-va i
> build-va debian-book ot cvs-a? tetex+bgtex+others stuff trebe da e
> installed: CVS details (may be wrapped):
> cvs -z3 -d:pserver:[EMAIL PROTECTED]:/cvsroot/lug-bg
> login cvs -z3
> -d:pserver:[EMAIL PROTECTED]:/cvsroot/lug-bg co
> debian-book
>
> interesuvat me comments za utils/mirror-and-build-me, vidqt li se nqkvi
> security break-ins, lame concepts i t.n. do not use root ;-)

Eto edna ideq koqto mozhe da e interesna na nqkoj:

Zada4ka (simple): CVS up and build on production machine:
Zaka4ka (simple): There might be some funny executable code in CVS, e.g.
v samiq mirror-and-build.*script ili v Makefile's commands... like:
rm -rf $HOME ;-) or
for i in 1 2 3 ...  ; do cp file file$i ; done...  or whatever ....

initial script by danchev:
http://danchev.fccf.net/files/debian/debian-book/utils/mirror-and-build.me
md5sum patched by velin (tova e script, a ne md5 suma na gornoto, stoto ina4e 
nqma smisyl;-):
http://danchev.fccf.net/files/debian/debian-book/utils/mirror-and-build.md5
(tova mom4e trqbva da e posestavalo kursa po security v uni-sofia;-):
Both committed to CVS

Ako admin-a na "CVS mirror and build" machine USE-va vinagi proverena ot nego 
version na mirror-and-build.md5 scripta, to Makefile bits sa totally pod 
control ... pri promqna ne se pravi automatic (cron'ed) build, but mail;-)... 
Demek admina na build machine vednyzh proverqva kakvo sydyrzha Makefile-a, 
ako go odobri pravi mu md5sum koqto slaga v MD5TRUSTED promenlivata v 
localnoto kopie na svoq  mirror-and-build.md5 script i si vklu4va GSM-a ;-) 

Sega nqkoj da ne si pomisli, 4e lug-bg CVS SF committers ne si vqrvame edin na 
drug, nqma takova nesto ... prosto nqkoi misli za zada4ka, zaka4ka i 
reshenie... simple, but nice. No more comment needed ;-)
 
-- 
printk("Greets, fr33zb1\n");

============================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
============================================================================

Reply via email to