| 1 |
On Tue, Aug 12, 2003 at 08:45:17AM -0400, Kurt Lieber wrote: |
| 2 |
> 1) I'd like Robin (robbat2) to comment on this since the primary reason for |
| 3 |
> the GLEP seems to be better control over CVS permissions. I know Robin has |
| 4 |
> some ideas on how he wants to change CVS permissions, so his feedback here |
| 5 |
> is important. (cc'd on this email) |
| 6 |
To elaborate on this, I planned to implement the same software FreeBSD |
| 7 |
uses to help manage their CVS repository. It consists of a few files in |
| 8 |
CVSROOT and changes to existing files there only. It changes us to using |
| 9 |
an access control list (contained in files, not using filesystem ACLs) |
| 10 |
from the existing UNIX permissions. |
| 11 |
|
| 12 |
The documentation at the top of this file describes the system best. |
| 13 |
http://www.freebsd.org/cgi/cvsweb.cgi/CVSROOT-src/cvs_acls.pl?rev=1.24&content-type=text/x-cvsweb-markup |
| 14 |
|
| 15 |
Here is the 'avail' file for the FreeBSD 'src' tree: |
| 16 |
http://www.freebsd.org/cgi/cvsweb.cgi/CVSROOT-src/avail?rev=1.208&content-type=text/x-cvsweb-markup |
| 17 |
|
| 18 |
There is also a patch to the cvs_acls.pl program so that the directory |
| 19 |
elements it takes can be regular expressions. |
| 20 |
|
| 21 |
As a side bonus this would remove the nasty CVS locks that presently |
| 22 |
occur when somebody tries to checkin some code to a place that they |
| 23 |
don't have access to, and the lock gets left behind. |
| 24 |
|
| 25 |
It also makes it very easy to specifically restrict any given user(s) or |
| 26 |
group(s) from any given part of CVS, or vice versa, as an example: |
| 27 |
unavail||gentoo-x86/sys-apps/portage,gentoo-src/portage |
| 28 |
avail|carpaski|gentoo-x86/sys-apps/portage,gentoo-src/portage |
| 29 |
|
| 30 |
This blocks anybody execept carpaski (and the cvsadmins as they would |
| 31 |
have a later rule allowing them global access) from being able to modify |
| 32 |
portage. |
| 33 |
|
| 34 |
-- |
| 35 |
Robin Hugh Johnson |
| 36 |
E-Mail : robbat2@××××××××××××××.net |
| 37 |
Home Page : http://www.orbis-terrarum.net/?l=people.robbat2 |
| 38 |
ICQ# : 30269588 or 41961639 |
| 39 |
GnuPG FP : 11AC BA4F 4778 E3F6 E4ED F38E B27B 944E 3488 4E85 |
Archives