Discussion:
unknown
1970-01-01 00:00:00 UTC
Permalink
=20

Thanks for the help and the links.

=20


=20
Date: Mon=2C 2 Mar 2009 13:15:54 -0500
Subject: Restricting users from command prompts [was: (no sub)]
=20
Hi all
=20
Is there any way to set up CVS on a Redhat Linux server so users using =
wincvs on windows client machines could use the pserver method (or any meth=
od) to do regular CVS transactions (ci=2Cco=2Cadd=2Cetc) but don't actually=
have user id/pw on the linux server and no entries in /etc/passwd? For sec=
urity reasons we just want them to have access to the repository and not an=
ything else on the linux server.
=20
Thanks
=20
http://ximbiot.com/cvs/manual/cvs-1.11.23/cvs_2.html#IDX87
=20
http://ximbiot.com/cvs/manual/cvs-1.11.23/cvs_2.html#SEC32
"On the other hand=2C once a user has non-read-only access to the reposit=
ory=2C=20
she can execute programs on the server system through a variety of means.=
=20
Thus=2C repository access implies fairly broad system access as well. It =
might=20
be possible to modify CVS to prevent that=2C but no one has done so as of=
this=20
writing."
=20
i.e.=2C you may be (probably are) buying yourself nothing. either you tru=
st=20
your users or you don't.
Loading...