Re: [PATCH]: don't store auth info in world-readable files

From: David Kimdon <dwhedon_at_debian.org>
Date: 2002-10-03 07:27:09 CEST

Wed, Oct 02, 2002 at 11:58:25PM -0500 wrote:
>
> This gets mentioned every now and then. .svn/auth/* are world-readable,
> but .svn/auth is not world-traversable. So I don't see any real security
> problem here.

hmm, good point, sounds like this patch can be safely ignored.

-David

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Thu Oct 3 07:21:52 2002

This message: [ Message body ]
Next message: Stephan Feder: "Re: Possible bug: SIGSEV while resurrecting directory"
Previous message: Scott Lamb: "Yet another 'Working copy not locked' error"
In reply to: Scott Lamb: "Re: [PATCH]: don't store auth info in world-readable files"
Next in thread: Karl Fogel: "Re: [PATCH]: don't store auth info in world-readable files"
Reply: Karl Fogel: "Re: [PATCH]: don't store auth info in world-readable files"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]