Re: svn cleanup switches?

On Thu, Feb 19, 2004 at 05:04:04PM +0000, Philip Martin wrote:
> Mark Benedetto King <mbk@lowlatency.com> writes:
>
> > That would make it a bad idea to type "svn cleanup" in an untrusted WC.
>
> What's an "untrusted" WC? It's next to impossible to have two
> different users with write access to the same WC, the chmod calls
> don't work.
>

My guess is that a pathological WC could be constructed that would cause
the client to execute an arbitrary command. Perhaps if the owner of the WC
maliciously chmodded everything 2777? Or if the victim user was root?

--ben

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Thu Feb 19 19:23:50 2004