<!-- MHonArc v2.4.4 -->
<!--X-Subject: [MUD-Dev] Re: Ruminations on CVS and developing in the Bazaar -->
<!--X-From-R13: X Q Znjerapr <pynjNhaqre.rate.ftv.pbz> -->
<!--X-Date: Mon, 30 Nov 1998 19:46:43 -0800 -->
<!--X-Message-Id: 199812010345.TAA31161#under,engr.sgi.com -->
<!--X-Content-Type: text/plain -->
<!--X-Reference: Pine.LNX.3.96.981127231042.4526A-100000#shamen,cyberhighway.net -->
<!--X-Head-End-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<html>
<head>
<title>MUD-Dev message, [MUD-Dev] Re: Ruminations on CVS and developing in the Bazaar</title>
<!-- meta name="robots" content="noindex,nofollow" -->
<link rev="made" href="mailto:claw#under,engr.sgi.com">
</head>
<body background="/backgrounds/paperback.gif" bgcolor="#ffffff"
text="#000000" link="#0000FF" alink="#FF0000" vlink="#006000">
<font size="+4" color="#804040">
<strong><em>MUD-Dev<br>mailing list archive</em></strong>
</font>
<br>
[ <a href="../">Other Periods</a>
| <a href="../../">Other mailing lists</a>
| <a href="/search.php3">Search</a>
]
<br clear=all><hr>
<!--X-Body-Begin-->
<!--X-User-Header-->
<!--X-User-Header-End-->
<!--X-TopPNI-->
Date:
[ <a href="msg00872.html">Previous</a>
| <a href="msg00874.html">Next</a>
]
Thread:
[ <a href="msg00863.html">Previous</a>
| <a href="msg00875.html">Next</a>
]
Index:
[ <A HREF="author.html#00873">Author</A>
| <A HREF="#00873">Date</A>
| <A HREF="thread.html#00873">Thread</A>
]
<!--X-TopPNI-End-->
<!--X-MsgBody-->
<!--X-Subject-Header-Begin-->
<H1>[MUD-Dev] Re: Ruminations on CVS and developing in the Bazaar</H1>
<HR>
<!--X-Subject-Header-End-->
<!--X-Head-of-Message-->
<UL>
<LI><em>To</em>: <A HREF="mailto:mud-dev#kanga,nu">mud-dev#kanga,nu</A></LI>
<LI><em>Subject</em>: [MUD-Dev] Re: Ruminations on CVS and developing in the Bazaar </LI>
<LI><em>From</em>: J C Lawrence <<A HREF="mailto:claw#under,engr.sgi.com">claw#under,engr.sgi.com</A>></LI>
<LI><em>Date</em>: Mon, 30 Nov 1998 19:45:42 -0800</LI>
<LI><em>Reply-To</em>: <A HREF="mailto:mud-dev#kanga,nu">mud-dev#kanga,nu</A></LI>
</UL>
<!--X-Head-of-Message-End-->
<!--X-Head-Body-Sep-Begin-->
<HR>
<!--X-Head-Body-Sep-End-->
<!--X-Body-of-Message-->
<PRE>
On Fri, 27 Nov 1998 23:27:02 -0700 (MST)
Ben Greear<greear#cyberhighway,net> wrote:
> Well, I've consumed almost all of the excellent page on the CVS
> code revision control system:
...
> The problem is trust. The most likely scenario is that I will
> have never met the ppl who want to help. How can I trust them?
There are two levels to such trust:
1) Trust them when accessing your machine (or whoever might gain
access to your machine via the account you give them).
2) Trust their code changes.
#1 is a bitch, and one I am becoming intimately familiar with under
CVS. The problem is that any given CVS user with write access to
the repository effectively has the ability to execute arbitrary
programs on your machine without your control. This is not
something I'm happy with for Kanga.Nu (I'm paranoid). After a lot
of beating about the bush and messing with SSH, and SSH pipes in
attempt to secure (more) the authentication end of CVS (its pretty
lightweight out of the box) with the idea of using SSH to help limit
the number of people who know or can get the authentication data,
I've finally given up. SSH1 just can't make port forwarded pipes to
accounts which aren't login/shell accounts (ideally I'd use an
account with /bin/false for a shell, a * password, and whose home
directory is root.root with 0400 permissions) and I'm uncomfortable
with the security of SSH2 as well as its licensing restrictions.
Ergo, for this use, SSH is out of the picture.
Conclusion: Follow *BSD's and BAtMUD's example and set up a chroot
jail for CVS with the accounts that the CVS users map to with the
above russian-style permissions. This has the huge advantage that
it puts all the onus for security on me as well as making a
reasonably tough nut to crack via CVS. Still have to do this tho.
#2 is a touchie feelie thing. I'd recommend a policy of code
reviews, initilly by with yourself as the review, and later with
trusted lieutenants as an additional pool of reviewers. Then use
nightly builds (if it doesn't build the check-in is bogus) as a
one-way check (I think there was a tool on Freshmeat to track build
errors and their guilty parties), and standard regression tests on
every build as the other-way check.
> So, does that mean watching everything they contribute to make
> sure they aren't screwing something up either on purpose or on
> accident??
Of course.
> That would seem to go against the benefits of open development....
Notice how many patches Linus refuses...
> I will definately watch the first additions that some other coder
> makes, both to check for careless mistakes and to check for gross
> incompetence... Maybe that would be enough. Why would anyone try
> to sabotage it anyway? That's like reverse-noosphere!
Do *not* allow checkins by anonymous users. Do use full tracking
with account aliases under CVS to track every change down to the
exact author.
> What if it's as simple as indentation changes or comment style.
Run Berkely indent as a filter under CVS to post-process all sources
into acceptable formats. IIRC this is documented in Cederqvist.
> I'm almost anal-retentive in my personal coding style.. Maybe try
> to put down some rules that others are expected to follow or
> else??
1) Document your preferred style in your repository and request that
all code follow it.
2) Install an indent filter as above, and document that the filter
will be applied to all checkins.
3) Relax. I too have my own coding style (a pretty linear extension
of basic K&R), but I've had to work with too much other odd and
queerly formatted code to care much any more.
--
J C Lawrence Internet: claw#kanga,nu
(Contractor) Internet: coder#kanga,nu
---------(*) Internet: claw#under,engr.sgi.com
...Honourary Member of Clan McFud -- Teamer's Avenging Monolith...
</PRE>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<HR>
<ul compact><li><strong>Follow-Ups</strong>:
<ul>
<li><strong><A NAME="00875" HREF="msg00875.html">[MUD-Dev] Re: Ruminations on CVS and developing in the Bazaar</A></strong>
<ul compact><li><em>From:</em> <greear#cyberhighway,net></li></ul>
</UL></LI></UL>
<!--X-Follow-Ups-End-->
<!--X-References-->
<UL><LI><STRONG>References</STRONG>:
<UL>
<LI><STRONG><A NAME="00862" HREF="msg00862.html">[MUD-Dev] Ruminations on CVS and developing in the Bazaar</A></STRONG>
<UL><LI><EM>From:</EM> Ben Greear <greear#cyberhighway,net></LI></UL></LI>
</UL></LI></UL>
<!--X-References-End-->
<!--X-BotPNI-->
<UL>
<LI>Prev by Date:
<STRONG><A HREF="msg00872.html">[MUD-Dev] Re: DIS: Client-Server vs Peer-to-Peer</A></STRONG>
</LI>
<LI>Next by Date:
<STRONG><A HREF="msg00874.html">[MUD-Dev] Re: DIS: Client-Server vs Peer-to-Peer</A></STRONG>
</LI>
<LI>Prev by thread:
<STRONG><A HREF="msg00863.html">[MUD-Dev] Ruminations on CVS and developing in the Bazaar</A></STRONG>
</LI>
<LI>Next by thread:
<STRONG><A HREF="msg00875.html">[MUD-Dev] Re: Ruminations on CVS and developing in the Bazaar</A></STRONG>
</LI>
<LI>Index(es):
<UL>
<LI><A HREF="index.html#00873"><STRONG>Date</STRONG></A></LI>
<LI><A HREF="thread.html#00873"><STRONG>Thread</STRONG></A></LI>
</UL>
</LI>
</UL>
<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
<ul><li>Thread context:
<BLOCKQUOTE><UL>
<LI><strong><A NAME="00867" HREF="msg00867.html">[MUD-Dev] Re: Ruminations on CVS and developing in the Bazaar</A></strong>,
Chris Gray <a href="mailto:cg#ami-cg,GraySage.Edmonton.AB.CA">cg#ami-cg,GraySage.Edmonton.AB.CA</a>, Sun 29 Nov 1998, 22:16 GMT
<UL>
<LI><strong><A NAME="00868" HREF="msg00868.html">[MUD-Dev] Re: Ruminations on CVS and developing in the Bazaar</A></strong>,
greear <a href="mailto:greear#cyberhighway,net">greear#cyberhighway,net</a>, Sun 29 Nov 1998, 23:11 GMT
</LI>
</UL>
</LI>
<LI><strong><A NAME="00862" HREF="msg00862.html">[MUD-Dev] Ruminations on CVS and developing in the Bazaar</A></strong>,
Ben Greear <a href="mailto:greear#cyberhighway,net">greear#cyberhighway,net</a>, Sat 28 Nov 1998, 06:33 GMT
<UL>
<LI><strong><A NAME="00863" HREF="msg00863.html">[MUD-Dev] Ruminations on CVS and developing in the Bazaar</A></strong>,
Petri Virkkula <a href="mailto:pvirkkul#iki,fi">pvirkkul#iki,fi</a>, Sat 28 Nov 1998, 08:36 GMT
</LI>
<LI><strong><A NAME="00873" HREF="msg00873.html">[MUD-Dev] Re: Ruminations on CVS and developing in the Bazaar</A></strong>,
J C Lawrence <a href="mailto:claw#under,engr.sgi.com">claw#under,engr.sgi.com</a>, Tue 01 Dec 1998, 03:46 GMT
<UL>
<LI><strong><A NAME="00875" HREF="msg00875.html">[MUD-Dev] Re: Ruminations on CVS and developing in the Bazaar</A></strong>,
greear <a href="mailto:greear#cyberhighway,net">greear#cyberhighway,net</a>, Tue 01 Dec 1998, 04:32 GMT
<UL>
<LI><strong><A NAME="00881" HREF="msg00881.html">[MUD-Dev] Re: Ruminations on CVS and developing in the Bazaar</A></strong>,
J C Lawrence <a href="mailto:claw#under,engr.sgi.com">claw#under,engr.sgi.com</a>, Wed 02 Dec 1998, 00:32 GMT
</LI>
</UL>
</LI>
</UL>
</LI>
</UL>
</LI>
<LI><strong><A NAME="00861" HREF="msg00861.html">[MUD-Dev] [RELEASE] Insanity To Infinity (I:I_OS) v.02a</A></strong>,
Bobby Bailey <a href="mailto:mush#smidefix,karen.hik.se">mush#smidefix,karen.hik.se</a>, Fri 27 Nov 1998, 03:12 GMT
<LI><strong><A NAME="00856" HREF="msg00856.html">[MUD-Dev] [RELEASE] Insanity To Infinity (I:I_OS) v.01a</A></strong>,
Bobby Bailey <a href="mailto:mush#smidefix,karen.hik.se">mush#smidefix,karen.hik.se</a>, Wed 25 Nov 1998, 03:21 GMT
</LI>
</UL></BLOCKQUOTE>
</ul>
<hr>
<center>
[ <a href="../">Other Periods</a>
| <a href="../../">Other mailing lists</a>
| <a href="/search.php3">Search</a>
]
</center>
<hr>
</body>
</html>
