On Tue, 26 Feb 2002, Guy Harris wrote:
> On Mon, Feb 25, 2002 at 10:04:00PM -0600, Gerald Combs wrote:
> > As Gilbert mentioned in a previous message, I've been tweaking the script
> > that synchronizes the anonymous CVS tree with the writable one. (I'm
> > trying to make things _better_ for anoncvs users, honest! :-)) The trees
> > are now being synchronized every five minutes, whether the writable tree
> > has changed or not.
>
> I think this may have been answered a while ago, but why do we have
> separate anonymous CVS and regular CVS trees? I think other projects
> have just one tree, to which they grant anonymous read-only access as
> well as granting write access to specific users.
Around the time I set up anoncvs, one or two security-related bugs had
been found in the CVS pserver. As a matter of paranoia, I placed
anonymous CVS in a chrooted environment with its own tree in case someone
managed to break into the server outright or found a way to
surreptitiously modify the code base.