Date: Thu, 27 Jan 2000 22:42:38 -0800 (PST) From: John Polstra <jdp@FreeBSD.org> To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: ports/net/cvsup-mirror Makefile ports/net/cvsup-mirror/files cvsupd.sh update.sh ports/net/cvsup-mirror/pkg DEINSTALL INSTALL PLIST ports/net/cvsup-mirror/scripts configure Message-ID: <200001280642.WAA34860@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
jdp 2000/01/27 22:42:38 PST Modified files: net/cvsup-mirror Makefile net/cvsup-mirror/files cvsupd.sh update.sh net/cvsup-mirror/pkg DEINSTALL INSTALL PLIST net/cvsup-mirror/scripts configure Log: This is a fairly substantial upgrade of the cvsup-mirror port. In honor of the occasion I have bumped the version number to 1.1. The port now depends upon the cvsup-bin and cvsupd-bin ports rather than on the more trouble-prone cvsup port. The CVSup server is run with "-C 100" (max. 100 clients at a time) and the true limit is set in the "/usr/local/etc/cvsup/cvsupd.access" file. This is nice because you can change the limit by editing the file; you don't have to restart the server. The cvsupd.access file also contains a rule to limit each individual host to one connection at a time. The CVSup client is now run under its own unprivileged user ID instead of root. This is a security enhancement. It makes it impossible for a compromised master site to install files into places outside the mirror area of the filesystem. The permissions of various other files such as /usr/local/etc/cvsup have also been strengthened to enhance security. Both client and server now cd to /var/tmp to run, so that if they decide to croak they'll be able to write the core file. :-) The /usr/local/etc/rc.d/cvsupd.sh script now honors the "start" and "stop" arguments. The configure script no longer attempts to tell you the sizes of the various collections. That's impossible to maintain. When I have time I plan to make a web page where one can obtain that information from an automatically-updated source. Then I will reference the URL in the configure script. It is possible to upgrade an existing cvsup-mirror-1.0 installation to this new version, but it is tricky because of the change in ownership of the mirrored files. I will post instructions to the freebsd-hubs mailing list after I make sure I have the procedure just right. Revision Changes Path 1.9 +5 -3 ports/net/cvsup-mirror/Makefile 1.5 +15 -5 ports/net/cvsup-mirror/files/cvsupd.sh 1.6 +12 -8 ports/net/cvsup-mirror/files/update.sh 1.2 +17 -8 ports/net/cvsup-mirror/pkg/DEINSTALL 1.4 +48 -35 ports/net/cvsup-mirror/pkg/INSTALL 1.3 +1 -0 ports/net/cvsup-mirror/pkg/PLIST 1.5 +30 -13 ports/net/cvsup-mirror/scripts/configure To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200001280642.WAA34860>