[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: CVS, RSH and direct access to repository

From: Nathan Kidd
Subject: Re: CVS, RSH and direct access to repository
Date: Fri, 16 Jan 2004 14:05:55 -0500
User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.6b) Gecko/20031205 Thunderbird/0.4

Jeeva Sarma wrote:
I want to know if there is any method to prevent users
from directly accessing repository.I read of one
method, using Openssh and restrict users to one
command, but that would prevent the users from even
logging on to the machine. Some developers use this
machine for other purposes(do their regular
development and stuff).We plan to have CVS server on
solaris, windows clients using ssh authentication.
Pls advice.

I haven't done this myself so perhaps someone can point out a flaw in this plan, but:

What about setting up a chroot jail that contains your cvs repository along with separate cvs user accounts and sshd restricted to the cvs command running on a different port. If your UIDs/GIDs are separate then local users (outside the jail) won't have access to the repository. The caveat is that for every developer that wants local ssh access in addition to cvs access, you'll have to maintain two user accounts.


reply via email to

[Prev in Thread] Current Thread [Next in Thread]