diff options
| author | Joey Hess <joey@gnu.kitenet.net> | 2009-08-22 14:29:18 -0400 |
|---|---|---|
| committer | Joey Hess <joey@gnu.kitenet.net> | 2009-08-22 14:29:18 -0400 |
| commit | 59527de76708616bc8966d0ced3577573c3062b6 (patch) | |
| tree | abadd26a1550d496bc350946764d7a99511b986f /doc/plugins/contrib | |
| parent | e51f099ed1e73d9b84ad7e26758c1e60f42205b8 (diff) | |
uh oh
Diffstat (limited to 'doc/plugins/contrib')
| -rw-r--r-- | doc/plugins/contrib/cvs/discussion.mdwn | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/doc/plugins/contrib/cvs/discussion.mdwn b/doc/plugins/contrib/cvs/discussion.mdwn index 65b6befd1..b063a53c2 100644 --- a/doc/plugins/contrib/cvs/discussion.mdwn +++ b/doc/plugins/contrib/cvs/discussion.mdwn @@ -31,6 +31,11 @@ the "cvs add <directory>" call and avoid doing anything in that case? >>> should only be built with execv() if the cvs plugin is loaded? >>> --[[schmonz]] +>>>> Hadn't considered that. While in wrapper mode the normal getopt is not +>>>> done, plugin getopt still runs, and so any unsafe options that +>>>> other plugins support could be a problem if another user runs +>>>> the setuid wrapper and passes those options through. --[[Joey]] + > Thing 2 I'm less sure of. (I'd like to see the web UI return > immediately on save anyway, to a temporary "rebuilding, please wait > if you feel like knowing when it's done" page, but this problem |