RE: How to programmatically restrict a /bin/rm command in a repository?

[Sergey Gurov]

You may look here:
<http://cygwin.com/ml/cygwin/2003-04/msg00317.html>
And there:
 http://www.sublimation.org/scponly/ 

for some ideas on how to restrict ssh user's access.

Sergey.

-----Original Message-----
From: address@hidden
[mailto:address@hidden On Behalf Of
Christopher Rumpf
Sent: Wednesday, September 03, 2003 1:25 AM
To: address@hidden
Subject: How to programmatically restrict a /bin/rm command in a
repository?


Hi there.

I have some developers who simply refuse to use the 'cvs rm', 'cvs
delete' and 'cvs remove' commands.  Instead they log into the CVS server
(using SSH), cd into the repository and /bin/rm the ,v files which they
are concerned about.  (yikes!)

Removing their cvs write permissions is not a solution which will work
as most of these people are major contributors.

Has anyone encountered this before and how did you solve it?  The only
way I can think (right now) is to write  a script that will run for
every single /bin/rm command which will first make sure that the
repository path is not in the path to be deleted.  This seems very
inefficient.

Is there an easier way using UNIX groups and/or some other Unix admin
command or trick I don't know of?

Thanks!

/* ---
     Christopher Rumpf
     786.385.3892:MOBILE
     305.860.4461:FAX
     MrRumpf:YIM
--- */