Hello,
I've installed a LFS system for use as a lightweight cvs/apache server
(maybe mail server also later).
When configuring the CVS server, I've noticed that some instructions
were left out (intentionally ?) on configuring the CVS for multiple
repositories (with, usually, each having several modules inside) and
with tighter access rights.
I've configured my CVS so that:
- only root can create/delete a repository
- you have to be member of the 'cvsuser' group to access cvs
repositories on the server.
Here's how I've done it, any corrections and ideas are welcome. It may
be a good starting point if you wish to modify the chapter 24 "Running a
CVS Server".
*As root*:
- Create the main root for cvs repositories. Permissions stay to 755 to
avoid users and cvsusers from creating repositories:
$ mkdir -pv /srv/cvsroot
- For each repository you wish to add (*still under root*):
$ export CVSROOT=/srv/cvsroot/[repository]
$ mkdir -pv /var/lock/cvs/[repository] (if allowing pserver)
$ chmod -v 1777 /var/lock/cvs/[repository] (if allowing pserver)
$ mkdir -pv $CVSROOT
$ chmod -v 3775 $CVSROOT
$ chgrp -v cvsusers $CVSROOT
$ cvs init
Then I recommend checking CVSROOT out, and edit config:
- Set 'SystemAuth=no' (more secure)
- Set 'LockDir=/var/lock/cvs/[repository]' (to avoid lock issues for
pserver, only need if using pserver for anonymous access)
Also, of note:
- The download link of cvs-1.11.20.tar.bz2 on ccvs.cvshome.org seems
rather dead. I had more success with ftp.gnu.org (NB, it's in /non-gnu/)
Hope it helps,
Julien
--
http://linuxfromscratch.org/mailman/listinfo/blfs-dev
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page