From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 7652 invoked by uid 1002); 12 Aug 2003 21:56:48 -0000 Mailing-List: contact gentoo-dev-help@gentoo.org; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@gentoo.org Received: (qmail 22523 invoked from network); 12 Aug 2003 21:56:46 -0000 Date: Tue, 12 Aug 2003 14:56:47 -0700 From: "Robin H. Johnson" To: Kurt Lieber Cc: gentoo-dev@gentoo.org, robbat2@gentoo.org Message-ID: <20030812215647.GD31636@curie-int.orbis-terrarum.net> Mail-Followup-To: Kurt Lieber , gentoo-dev@gentoo.org References: <20030804183108.GA6036@gentoo.org> <20030812124513.GD4094@mail.lieber.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="10jrOL3x2xqLmOsH" Content-Disposition: inline In-Reply-To: <20030812124513.GD4094@mail.lieber.org> User-Agent: Mutt/1.5.4i Subject: Re: [gentoo-dev] GLEP #10 -- Proposal for restructuring the CVS regarding documentation wrt internationalization proposal X-Archives-Salt: 2ee0b4bf-88e5-4c02-a74d-daf0b0f5c2cb X-Archives-Hash: fed0e5a6b055966130af5c0050a2b7e3 --10jrOL3x2xqLmOsH Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Aug 12, 2003 at 08:45:17AM -0400, Kurt Lieber wrote: > 1) I'd like Robin (robbat2) to comment on this since the primary reason f= or > the GLEP seems to be better control over CVS permissions. I know Robin h= as > some ideas on how he wants to change CVS permissions, so his feedback here > is important. (cc'd on this email) To elaborate on this, I planned to implement the same software FreeBSD uses to help manage their CVS repository. It consists of a few files in CVSROOT and changes to existing files there only. It changes us to using an access control list (contained in files, not using filesystem ACLs) =66rom the existing UNIX permissions. The documentation at the top of this file describes the system best. http://www.freebsd.org/cgi/cvsweb.cgi/CVSROOT-src/cvs_acls.pl?rev=3D1.24&co= ntent-type=3Dtext/x-cvsweb-markup Here is the 'avail' file for the FreeBSD 'src' tree: http://www.freebsd.org/cgi/cvsweb.cgi/CVSROOT-src/avail?rev=3D1.208&content= -type=3Dtext/x-cvsweb-markup There is also a patch to the cvs_acls.pl program so that the directory elements it takes can be regular expressions. As a side bonus this would remove the nasty CVS locks that presently occur when somebody tries to checkin some code to a place that they don't have access to, and the lock gets left behind. It also makes it very easy to specifically restrict any given user(s) or group(s) from any given part of CVS, or vice versa, as an example: unavail||gentoo-x86/sys-apps/portage,gentoo-src/portage avail|carpaski|gentoo-x86/sys-apps/portage,gentoo-src/portage This blocks anybody execept carpaski (and the cvsadmins as they would have a later rule allowing them global access) from being able to modify portage. --=20 Robin Hugh Johnson E-Mail : robbat2@orbis-terrarum.net Home Page : http://www.orbis-terrarum.net/?l=3Dpeople.robbat2 ICQ# : 30269588 or 41961639 GnuPG FP : 11AC BA4F 4778 E3F6 E4ED F38E B27B 944E 3488 4E85 --10jrOL3x2xqLmOsH Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Robbat2 @ Orbis-Terrarum Networks iD8DBQE/OWKfsnuUTjSIToURAkQjAJ9CjG4cbk3J5F8Ke+y/3BTO/BVtcgCfTNLE EDlLKeJ6tGfRSPc5k6Ky15U= =JxU/ -----END PGP SIGNATURE----- --10jrOL3x2xqLmOsH--