Am Freitag, den 07.09.2007, 10:49 +0200 schrieb Florian Weimer: > * Joachim Breitner: > > >> These files have specific filenames at specific locations relative to > >> the svn repository root. > > > > But since I can put a repository _anywhere_ by just copying it there, > > how do you want the admin to prevent the user running it’s hook > > commands? > > I think mounting the file system no-exec covers that. IIRC, > Subversion directly executes the hook scripts, and this will fail in > that case.
Then this should be mentioned in the file. I also think that this is quite a high hurdle: Admins that want that can surely re-compile scponly. For the rest, the debian package should come without svn support. The README.Debian could describe the disabled features, and under what circumstances they are save, and how best to recompile scponly. Greetings, Joachim -- Joachim "nomeata" Breitner Debian Developer [EMAIL PROTECTED] | ICQ# 74513189 | GPG-Keyid: 4743206C JID: [EMAIL PROTECTED] | http://people.debian.org/~nomeata
