[Gnu-arch-users] Re: Future of GNU Arch, bazaar and bazaar-ng ... ?

[Matthieu Moy]

address@hidden writes:

> On Mon, Aug 22, 2005 at 02:45:46PM +0200, Matthieu MOY wrote:
>> martin f krafft said:
>> 
>> > Another thing I am completely missing from baz is better/more
>> > flexibly/scalable hook support.
>> 
>> That's very hard to do in a secure way: baz hooks are arbitrary code, and
>> have to be ran on the client since there's no real server. And I don't
>> want arbitrary code to be executed on my machine when I run baz ...
>
> Not to pick nits, but hooks aren't arbitrary code. They're code that
> traditionally the user himself has written. 

Hooks in the way Bazaar manages them (~/.arch-params/hook), yes. But
Martin was asking for a hook managed in the archive itself. In this
case, you can't trust the code by default (the wiki desribes a way to
store the hook in the working tree, actually).

-- 
Matthieu