info-cvs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Fw: need to force username of cvs 'action' when using shared SSH account


From: Greg A. Woods
Subject: Fw: need to force username of cvs 'action' when using shared SSH account
Date: Tue, 4 May 2004 15:10:25 -0400 (EDT)

[ someone wrote: ]
> Subject: Fw: need to force username of cvs 'action' when using shared SSH 
> account
>
>  I just can't imagine that this hasn't been required before: a single shell
> account with a used id of, for example,  'cvsuser' requiring SSH, instead of
> pserver, authentication and access for developers.  The nature of CVS, that
> of tracking diffs and who did what when, seems to be compromised in this
> situation.  Thats all.

I just cannot possibly ever even conceive of anyone using a "shared SSH
account".

The very concept is entirely antithetical to the goals of SSH and
computing security in general.

You may as well just use pserver in the clear and be very explicit and
forthright about your total lack of security.

[[ And yes, I do intend that comment to be very sarcastic. ]]

-- 
                                                Greg A. Woods

+1 416 218-0098                  VE3TCP            RoboHack <address@hidden>
Planix, Inc. <address@hidden>          Secrets of the Weird <address@hidden>




reply via email to

[Prev in Thread] Current Thread [Next in Thread]