Re: Moving to Pserver from .rhosts

[Mike Ayers]

Greg A. Woods wrote:
> [ On Friday, November 15, 2002 at 11:17:10 (-0800), Shankar Unni wrote: ]
>
> > Subject: RE: Moving to Pserver from .rhosts
> >
> > Greg opines:
> >
> >
> > > Then you have no accountability in your CVS repository.  None.
> >
> > You have as much accountability as you have from ssh and the passwd
> > file: you know the name of the person (from the pserver passwd file),
> > and that is recorded in the repository.
>
> No you don't.  CVS is not a security application.  It was not designed
> to be one and it cannot ensure any (i.e. not any at all) level of
> accountabilty.  None whatsoever.  Nil.  Zilch.  Zip.  Zero.  Negative even.
>
> If you think otherwise you are sadly mistaken and seriously fooling
> yourself into a complete and utterly false sense of security.

        Stupid questions for blowhards time:

	When did anyone in this thread actually *ask* how to secure their CVS 
server?


/|/|ike