RE: Security, audits and pserver

[Neis, Mark]

CHARLES HART wrote:

>People have write access to spots in the repository,
>therefore they, just like CVS, can write as they please
>to the ,v files.

This is not necessarily true, as you can use CVS within a
chroot'ed environment. In that case you can prevent your
users from getting a shell resp. from executing any
commands than the few you allow them to.

One example how to do this is the (apparently little known)
set of scripts by Pascal Bourguignon that I mentioned in my
other post today.  You can find it at [1].

Regards,
Mark

[1] http://informatimago.free.fr/i/linux/chrooted-ssh-cvs.en.html