How can we stop this security hole in PVOB?

Question

Any user can run this command and blow out the vob-registry in the PVOB.

cleartool unregister -view -uuid c8b329ed.60814357.9806.26:55:85:75:e2:bf

I believe triggers won't work in this case.

Is there any solution to restrict user to use those command?

this is a command for the vob: cleartool unregister -vob -uuid d6ca911d.229a41bb.942b.fd:ed:f2:bb:5c:f8 — user2370590, May 16 '13 at 20:04

score 1 · Accepted Answer · answered May 17 '13 at 15:58

1

Even unregistered, you can still re-register a vob with cleartool register, so it isn't too bad.

cleartool register -vob -host corona -hpath /vobstg/tests.vbs –gpath /net/corona/vobstg/test.vbs /vobstg/test.vbs

answered May 17 '13 at 15:58

VonC

For the command you provided, admin involvement required but to unregister, anyone can do it. – user2370590 May 20 '13 at 14:47

1 Answers1