From owner-freebsd-security@FreeBSD.ORG Sun Nov 25 21:13:27 2012 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 58F746E1; Sun, 25 Nov 2012 21:13:27 +0000 (UTC) (envelope-from des@des.no) Received: from smtp.des.no (smtp.des.no [194.63.250.102]) by mx1.freebsd.org (Postfix) with ESMTP id 0BCE58FC14; Sun, 25 Nov 2012 21:13:26 +0000 (UTC) Received: from ds4.des.no (smtp.des.no [194.63.250.102]) by smtp.des.no (Postfix) with ESMTP id 0F3FC69B3; Sun, 25 Nov 2012 22:13:26 +0100 (CET) Received: by ds4.des.no (Postfix, from userid 1001) id CC1BB9547; Sun, 25 Nov 2012 22:13:25 +0100 (CET) From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= To: grarpamp Subject: Re: FreeBSD needs Git to ensure repo integrity References: Date: Sun, 25 Nov 2012 22:13:25 +0100 In-Reply-To: (grarpamp@gmail.com's message of "Sat, 17 Nov 2012 15:00:06 -0500") Message-ID: <864nkdtmh6.fsf@ds4.des.no> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.4 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Cc: freebsd-hackers@freebsd.org, freebsd-hubs@freebsd.org, freebsd-questions@freebsd.org, freebsd-security@freebsd.org X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 25 Nov 2012 21:13:27 -0000 grarpamp writes: > Any of hundreds of committer and admin accounts could be compromised > with the attacker silently editing the repo. FUD. Committer accounts don't have direct access to the repo. DES --=20 Dag-Erling Sm=C3=B8rgrav - des@des.no