[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: connection using pserver

From: Larry Jones
Subject: Re: connection using pserver
Date: Fri, 17 Jan 2003 16:46:24 -0500 (EST)

Kenneth Porter writes:
> My intention is to run the pserver as a pseudo-user and set the 3rd value
> to that same pseudo-user for all cvs users. This eliminates the need to run
> the pserver as root, which is always a security risk for any service.

It also eliminates the ability to use the system's access controls to
control access to your repository, not to mention any ability to track
any particular action back to a specific user based on the system's
audit trail info.  If you're at all concerned about security, you should
not be using pserver, you should be using :ext: with SSH.

-Larry Jones

Whatever it is, it's driving me crazy! -- Calvin

reply via email to

[Prev in Thread] Current Thread [Next in Thread]