BTW, do you understand why anon access (/etc/xinetd.d/bzr-hpss) passes
the --allow-writes option?
No idea.
That makes no sense to me. It runs as user nobody, so it cannot (and
should not) write anything.
Agreed. Let's try removing it and see if there is some immediate
failure report?
Maybe it had to do with some ancient version of bzr, or maybe that was
mistakenly thought to be relevant to non-anon access? No real idea,
though ...
