Bazaar

  1. Bug #67589
  2. Comment #4

Comment 4 for bug 67589

Revision history for this message
Aaron Bentley (abentley) wrote : Re: [Bug 67589] Re: bzr does not store permissions

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jonathan Knowles wrote:
> ** Description changed:
> I'd consider this a security vulnerability, but am going to wait for
> feedback before tagging it as such. Versions used: Debian bzr-0.10-1 on
> ws1, Ubuntu bzr-0.8.2-1ubuntu3 on ws2. If you need further info, I'll do
> my best to provide it.

Bazaar is a software development tool first and foremost. We don't
consider permissions other than the execute bit to be relevant to
software development. Supporting them would add complexity and take
resources away from other activities.

You may certainly version config files using Bazaar, but you are not
using it as intended.

Aaron
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGf9ad0F+nu1YWqI0RAhdRAJ9mWORWoXgWWA+Z+4Xfd6u1O69vLwCfcTJc
5z/jOByVOKluEwvWcSqx0Fs=
=5w4v
-----END PGP SIGNATURE-----