Re: Tortouse SVN usage and technical quiestions

On 24.08.2017 10:39, Kiss Zoltan wrote:
> Dear Tortoisesvn Community,
>
> I would like to ask couple of questions about the https://tortoisesvn.net/downloads.html application, version 1.9.7, for evaluating if is it fulfil all the requirements needed to use in corporate environment.
>
> - what are the minimum hardware, operation system, and additional software requirement for running this application ?

Windows Vista or later.
Version 1.10 will require Win7 or later.

No other requirements.

> - is administrator level access needed for installing the application ?

Yes: TortoiseSVN is a shell extension, which can not be installed
without admin privileges.

> - is this software has any IT security certificate (iso 27001 for example) ?

Not that I'm aware of

> - is this application tested with 3rd party IT Security audit ?

No, but the source code is freely available.

> - is the application communicating with any internet server (updates, sharing usage information, etc) ?

Apart from the obvious connections to the svn repositories you use, it
will download the version.txt file once a week from our server to check
if there's a newer version available.
That can be disabled however:
https://tortoisesvn.net/docs/release/TortoiseSVN_en/tsvn-admins-upgradecheck.html

> - can this application work as standalone or other application needed to use this ?

it's standalone

> - what kind of changes are the application makes in the computer / OS (registry, temp files, etc)

Apart from the installation registry entries required for the shell
extension to work, it saves user settings in the registry as well.

> - has the application got sandbox function ?

No.

> - can the application send files to external servers ?

Really? Do you even know what TortoiseSVN is?

> - has the application any screen sharing function (like remote desktop) ?

No.

> - are there user management in the application ?

No.

> - can the application logs any user activity ? if it can where is stores the log, and what type of activities logged ?

Yes. Read the docs.

> - how the application can be updated ?

Like any other: run the msi.

> - what are the effect of the updates (like the application or the operation system have to be restarted)?

Restart is required.

> - are the updates planned and advertised on a public website (update / patch dates, list of changes)

Every new version is mentioned on the website, and an email goes out to
the announce mailing list

> - are there any publicly available vulnerability list of this application on the website (for ex: https://tortoisesvn.net/support.html ) ? What is the URL where these information are available ?

No for TortoiseSVN, yes for the svn lib:
http://subversion.apache.org/security/

> - what kind of support options are available for the application (email, support website, phone, etc) ?

this mailing list.

> - do you guarantee any SLA for fixing the founded errors, vulnerabilities ?

Vulnerabilities are guaranteed to be fixed for the current versions.

> - are the updates / patches free ?

Yes

> - is the application handles any personal data (for example name, email address) ?

No.

> - is it allowed to use this application (in trial or full version) in corporate environment (based on the licencing) ?

Yes.

Next time, go through your list yourself and at least leave off anything
you can clearly answer yourself.

Stefan

-- 
        ___
   oo  // \\      "De Chelonian Mobile"
  (_,\/ \_/ \     TortoiseSVN
    \ \_/_\_/>    The coolest interface to (Sub)version control
    /_/   \_\     http://tortoisesvn.net
------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=3293035
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].