Re: chroot jail redux

[Dan Kegel]

Gary,
thanks for the link to Samba's setup.  I've added it to
http://www.kegel.com/cvsadmin.html#links.security

- Dan

Gary Granger wrote:
> 
> Thanks for the link summary; that is very helpful.  Have you seen the anon
> cvs setup used for Samba?
> 
>     http://www.samba.org/samba/cvs.html
> 
> Similar to the unix-tools plan, there is a wrapper program which does the
> chroot before executing cvs.  It is meant for read-only anonymous cvs, but
> I think it would work for read-write.  There is a readme in the wrapper
> checkout with details on setting up a chroot area for linux.  I'm thinking
> I'll use some combination of this approach and the unix-tools approach you
> pointed out.  Thanks.
> 
> Across the ether fly the words of Dan Kegel:
> >
> > Is there a resource I'm missing here?  Has Justin put
> > up a web page about what's involved in really running
> > cvs in a chroot jail?
> 
> gary