Re: Security setup

[Mike Ayers]

Larry Jones wrote:

> > > Once you're connected to a pserver, it's a fairly simple process to get
> > > it to execute arbitrary commands for you; giving someone pserver access
> > > is equivalent to giving them shell access.

> s/pserver/server/g
>
> The above applies to *any* kind of client/server mode, not just pserver.

	Let me make sure of this.  You're saying that even when running only 
over ssh, in a jail, with a login shell of cvs, someone can still get 
shell access?

        If I am misunderstanding, please clarify.


        Thanks,

/|/|ike