Re: security question

[Frederic Brehm]

At 10:51 AM 12/12/2002, Phil R Lawrence wrote:
> Now, about security.  We would be a multi-client shop, so I need SSH to 
> encrypt sign-on info.  Also, to make auditors very happy, we need to grant 
> and deny write security to various projects in the repository.

We are a multi-client shop, too. We use a combination of group membership 
explained in http://www.cvshome.org/docs/manual/cvs_2.html#SEC13 and 
completely separate repository roots. A loginfo script runs to insure that 
permissions are correct after every commit.

Every commercial client gets their very own separate repository. Government 
unclassified clients may or may not share modules within a repository 
depending on the nature of the projects. Our own proprietary software has 
its own set of repositories.

We use multiple repositories to make it easier to audit where things came 
from. It's also easier to archive all of the software that goes with a 
single client when all of the software is under a CVSROOT unique to that 
client.

Fred


_______________________________________________________________
Frederic W. Brehm, Sarnoff Corporation, http://www.sarnoff.com/