[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: Moving to Pserver from .rhosts

From: Greg A. Woods
Subject: RE: Moving to Pserver from .rhosts
Date: Fri, 15 Nov 2002 16:13:08 -0500 (EST)

[ On Friday, November 15, 2002 at 11:17:10 (-0800), Shankar Unni wrote: ]
> Subject: RE: Moving to Pserver from .rhosts
> Greg opines:
> > Then you have no accountability in your CVS repository.  None.
> You have as much accountability as you have from ssh and the passwd
> file: you know the name of the person (from the pserver passwd file),
> and that is recorded in the repository.

No you don't.  CVS is not a security application.  It was not designed
to be one and it cannot ensure any (i.e. not any at all) level of
accountabilty.  None whatsoever.  Nil.  Zilch.  Zip.  Zero.  Negative even.

If you think otherwise you are sadly mistaken and seriously fooling
yourself into a complete and utterly false sense of security.

                                                                Greg A. Woods

+1 416 218-0098;            <address@hidden>;           <address@hidden>
Planix, Inc. <address@hidden>; VE3TCP; Secrets of the Weird <address@hidden>

reply via email to

[Prev in Thread] Current Thread [Next in Thread]