[cvsnt] Re: cvs checkout -d does not work with *absolute* paths

Carl Zmola carl at membersonlysoftware.com
Fri Jul 16 17:54:22 BST 2004


I just ran into the same problem with cvs export.

The command line I am trying is:
cvs export -Dnow -d c:\placetogo  moduletoexport


I am able to export  to an absolute path name (on a mounted drive) with 
an old cygwin cvs.exe but doing a similar export with cvs.exe from cvsnt 
fails.  Does the comment below mean that this will never work in cvsnt  
because it is a potential security hole?

I am trying to script the publishing of material onto an ftp server and 
web server.  Is there a better way of doing this?

Carl

Tony Hoyle wrote:

> Daniel Lapolla wrote:
>
>> The following command sequence works well with my old 2.0.24 client.
>> We have several scripts depending on this "-d" behavior.
>
>
> At some point I hacked cvsnt to allow this (standard cvs has never 
> allowed absolute paths in client/server mode).  Security 
> considerations now mean that it cannot be allowed, so we're back to 
> the standard behaviour.
>
>> Am I doing something wrong? Is this a bug? Will it be fixed?
>
>
> It was a bug in the client to allow it in the first place - To allow a 
> server to write to arbitrary locations on a client is asking for trouble.
>
> Tony
> _______________________________________________
> cvsnt mailing list
> cvsnt at cvsnt.org
> http://www.cvsnt.org/cgi-bin/mailman/listinfo/cvsnt
>
>


-- 
---------------------------------------------------
-  Carl Zmola
-  Carl at MembersOnlySoftware.com
-  202-328-1785 x 103
---------------------------------------------------




More information about the cvsnt mailing list