Protect CVSROOT tree

[Howard Zhou]

Hi, CVS users,

CVSROOT directory tree is protect by a group permission. However this is not
good enough since everybody in the group can go there and make change
directly in the CVS repository.

If you take off the group permission, then you have to figure out a way to
make change via setuid program. However, cvs seems to ignore effective
setuid.

Therefore I'd like to know if there is any appropriate way to protect the
CVSROOT repository from being modified besides the owner of the CVSROOT.

Thanks in advance.

Howard