[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Bug? FSFS revision control

From: Tom Mornini <tmornini_at_infomania.com>
Date: 2005-01-26 22:20:44 CET

Hash: SHA1

On Jan 26, 2005, at 1:03 PM, Dassi, Nasser wrote:

> Issue:
> The revision number with file-type FSFS is manually modifyable in any
> ol' text editor.  The value (in a file within the repository's file
> structure) is stored in plain-text and can be edited with extreme
> ease.


> Possible/suggested bug fix/workaround solutions:
> 1. Implement integrity checking to cause future modified-repository
> commits to fail; or
> 2. Implement revision-locking at the filesystem level so existing
> revprops + revs files are not *overwritten*; or
> 3. Revert to latest revision based on FSFS-stored revprops and revs
> file trails; or
> 4. Implement encoding/encryption to reduce likelihood of tampering
> (as Berkeley DB does)

5. Implement OS level file security (per OS, per installation) to
prevent access to people who should not be able to do this.

You know, I just discovered another bug in both Subversion AND FSFS!

If you manually give OS commands to destroy your repository, your
repository is destroyed, and Subversion neither prevents,
nor gives adequate warning, nor automatically ignores the results of
those commands. Additionally, it gives no method of
fixing the problem directly.

Now, I'm finding bugs in nearly everything:

1) Televisions stop working when dropped
2) Knives make people bleed when used improperly.
3) Guns...don't even get me started!

I'm sort of having a bad day, and might regret this email later, but I
have to ask:

Was this a serious email (bad) or intended as a joke (funny)?

- --
- -- Tom Mornini
Version: GnuPG v1.2.4 (Darwin)


To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Jan 26 22:29:46 2005

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.