RE: Remote cvs and security

[Greg A. Woods]

[ On Monday, September 10, 2001 at 19:37:23 (-0500), Colin Bester wrote: ]
> Subject: RE: Remote cvs and security
>
> Greg, I would like to know what alternatives you are referring to.

SSH, even within the VPN, for one.  Kerberized rsh for another.  Even
just plain old rsh is better than pserver if you do really trust your
VPN and all those on it, and the configuration of internal DNS, etc.

> While cvs might have been designed for free source development and some
> of us even agree with it, we don't always have this freedom of choice
> and need to protect our data.

I'm not sure what that has to do with anything....  CVS is happy to use
any external remote execution tool so long as it provides a nice clean
connection and is relatively command-line compatible with rsh (or can be
made so), such as ssh.

-- 
                                                        Greg A. Woods

+1 416 218-0098      VE3TCP      <address@hidden>     <address@hidden>
Planix, Inc. <address@hidden>;   Secrets of the Weird <address@hidden>