Re: -chroot patch for CVS ?

[Philip Lijnzaad]

> The author of rsync has a 'pserver' wrapper program which chroots before
> running cvs pserver.  It's used for the samba and rsync anonymous cvs
> access. See the note about 'how it's done' on this page:

>     http://www.samba.org/samba/cvs.html

> It directs you to check out the code itself from cvs:

>         cvs -d :pserver:address@hidden:/cvsroot co pserver

> I've examined it a while back but have not put it into practice.

Brilliant, thanks! (unfortunately, http://www.samba.org is currently not very
responsive, though, so I'll have to wait before trying).

Incidentally, in case it interests people (or posterity browsing
groups.google.com :-), I also found another patches/projects that would
appear to be relevant to securing public CVS access:

idx-chrooted-ssh (http://www.idealx.org/prj/idx-chrooted-ssh-cvs/index.en.html)
cvs-nserver      (http://alexm.here.ru/cvs-nserver/)


Enjoy,

                                                                      Philip
-- 
The mail transport agent is not liable for any coffee stains in this message
-----------------------------------------------------------------------------
Philip Lijnzaad, address@hidden European Bioinformatics Institute,rm A2-08
+44 (0)1223 49 4639                 Wellcome Trust Genome Campus, Hinxton
+44 (0)1223 49 4468 (fax)           Cambridgeshire CB10 1SD,  GREAT BRITAIN