Re: [PATCH]: don't store auth info in world-readable files

David Mankin <mankin@ants.com> writes:
> Real security problem or not, isn't a patch to fix a perceived
> security problem a good idea too? If it keeps coming up, and there's
> no downside to fixing it, I can't see why the patch shouldn't be
> included. I don't think we want security related bug reports about SVN
> in various OS trackers; it might make it harder to convince our
> respective bosses to let us switch our SCM to SVN.

Let's see if that really happens in practice. For example, the Debian
bug report http://bugs.debian.org/162953 got corrected almost as soon
as it was filed.

-Karl

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Thu Oct 3 17:56:31 2002