Re: Security setup

[Larry Jones]

Phil R Lawrence writes:
> 
> Larry Jones wrote:
> > 
> > Once you're connected to a pserver, it's a fairly simple process to get
> > it to execute arbitrary commands for you; giving someone pserver access
> > is equivalent to giving them shell access.
> 
> Right...  so this approach does not use pserver.  Developers SSH to 
> special user accounts with no shell.  SSH is set up to only allow the 
> cvs command.  Access rights to various projects are determined by group 
> membership instead of by pserver.

s/pserver/server/g

The above applies to *any* kind of client/server mode, not just pserver.

-Larry Jones

We seem to be out of gun powder. -- Calvin