Jonathan Knowles wrote:
> ** Description changed:
> I'd consider this a security vulnerability, but am going to wait for
> feedback before tagging it as such. Versions used: Debian bzr-0.10-1 on
> ws1, Ubuntu bzr-0.8.2-1ubuntu3 on ws2. If you need further info, I'll do
> my best to provide it.
Bazaar is a software development tool first and foremost. We don't
consider permissions other than the execute bit to be relevant to
software development. Supporting them would add complexity and take
resources away from other activities.
You may certainly version config files using Bazaar, but you are not
using it as intended.
Aaron
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Jonathan Knowles wrote:
> ** Description changed:
> I'd consider this a security vulnerability, but am going to wait for
> feedback before tagging it as such. Versions used: Debian bzr-0.10-1 on
> ws1, Ubuntu bzr-0.8.2-1ubuntu3 on ws2. If you need further info, I'll do
> my best to provide it.
Bazaar is a software development tool first and foremost. We don't
consider permissions other than the execute bit to be relevant to
software development. Supporting them would add complexity and take
resources away from other activities.
You may certainly version config files using Bazaar, but you are not
using it as intended.
Aaron enigmail. mozdev. org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://
iD8DBQFGf9ad0F+ nu1YWqI0RAhdRAJ 9mWORWoXgWWA+ Z+4Xfd6u1O69vLw CfcTJc WcSqx0Fs=
5z/jOByVOKluEwv
=5w4v
-----END PGP SIGNATURE-----