News for hackers. Stuff that matters.

A comment on Retguard: An improved stack protector for OpenBSD. Parent comment

Re:Retguard: An improved stack protector for OpenBSD by kazinator on Wednesday June 06, 2018 @10:54AM (#17247619)
I made a program called Meta-CVS in 2002 that stores a versioned directory structure with permissions and symbolic links along with the files in an ordinary CVS repository.

http://www.kylheku.com/~kaz/mcvs.html

Meta-CVS has an import feature (mcvs grab) which detects renamed files. It fixes up symlinks pointing to moved files too and such.

Meta-CVS didn't catch on widely because by the time I had it stable, CVS itself was being side tracked by newly emerging projects like SVN.

Plus people were afraid of it being written in Common Lisp.

If you're still using CVS in 2018 and not Meta-CVS, you're ridiculously backwards though. :)

[ Parent | on HN ]
Re:Retguard: An improved stack protector for OpenBSD by nickpsecurity on Wednesday June 06, 2018 @04:53PM (#17251016)
The need to secure repos was identified by Karger in MULTICS evaluation. It was a requirement in TCSEC security certification. A great summary of issues is below by David A. Wheeler:

https://www.dwheeler.com/essays/scm-security.html

On top of yours, the OpenCM and Aegis programs attempted to meet some of these requirements. Most ignore them. Big, blind spot in software security.

[ Parent | on HN ]