[csw-maintainers] The source code of www.opencsw.org

Mike Watters mwatters at opencsw.org
Fri Jul 24 04:26:17 CEST 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Philip Brown wrote:
> On Thu, Jul 23, 2009 at 04:29:13PM -0500, Mike Watters wrote:
>> Hi Phil
>> Philip Brown wrote:
>>> On Thu, Jul 23, 2009 at 05:56:49PM +0200, Trygve Laugst?l wrote:
>>>>> absolutely not "public".
>>>> Why not?
>>> security issues.
>>>
>> You are correct, as the code lies currently, there would be severe security
>> issues in publishing the code.
>>
>> however, with a few minor modifications, it would be quite possible.
> 
> And when changes are made in the future, more holes likely open up.
> That is the way of source code.
> 
> Better for security to keep it local-visibility-only, if it doesnt need to
> be fully public.
> 
> It doesnt need to be fully public.

what about a compromise and have either a sourceforge or self-hosted "members
only" subversion,git,cvs,bzr,etc... (pick your favorite version control
software) for the source code.


- --
Thanks,
Mike

"Any intelligent fool can make things bigger, more complex,
and more violent.  It takes a touch of genius -- and a lot of courage --
to move in the opposite direction."

* Albert Einstein 1879 - 1955
    US German-born Theoretical Physicist
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkppG8kACgkQLrhmsXMSLxe1OQCfa9vqFwXptAzOb+q9yDqXgLc3
TKwAoMcUsbEVT9ItjdGUbqt2ItVbon0y
=CDdd
-----END PGP SIGNATURE-----



More information about the maintainers mailing list