How best to secure CVS?

[Villalovos, John L]

I was wondering if there was information out there on how best to secure
CVS?

How secure is the pserver mode?  Can a user who has a CVS account gain root
access on a system running pserver?

I am not concerned with the passwords being passed in the clear because I am
using STUNNEL for the pserver protocol.

How useful is it to setup a chroot environment?

Thanks for any info, pointers, etc...

John

John Villalovos
Intel Corporation 
15220 NW GREENBRIER PKWY # CO5-162
BEAVERTON, OR  97006-5762
(503) 677-5777   Fax: (503) 677-6670

GPG 1.+/PGP 5.+/ DSS/Diffie Helman
http://www.sodarock.com/JohnVillalovos-gpgkey.txt
1024D/1A25D86C 2F24 AD89 E5D5 C92B 7FE2  F878 7ED5 2D38 1A25 D86C