Hello,

I've installed a LFS system for use as a lightweight cvs/apache server (maybe mail server also later).

When configuring the CVS server, I've noticed that some instructions were left out (intentionally ?) on configuring the CVS for multiple repositories (with, usually, each having several modules inside) and with tighter access rights.

I've configured my CVS so that:
- only root can create/delete a repository
- you have to be member of the 'cvsuser' group to access cvs repositories on the server.

Here's how I've done it, any corrections and ideas are welcome. It may be a good starting point if you wish to modify the chapter 24 "Running a CVS Server".

*As root*:
- Create the main root for cvs repositories. Permissions stay to 755 to avoid users and cvsusers from creating repositories:
$ mkdir -pv /srv/cvsroot

- For each repository you wish to add (*still under root*):
$ export CVSROOT=/srv/cvsroot/[repository]
$ mkdir -pv /var/lock/cvs/[repository] (if allowing pserver)
$ chmod -v 1777 /var/lock/cvs/[repository] (if allowing pserver)
$ mkdir -pv $CVSROOT
$ chmod -v 3775 $CVSROOT
$ chgrp -v cvsusers $CVSROOT
$ cvs init


Then I recommend checking CVSROOT out, and edit config:
- Set 'SystemAuth=no' (more secure)
- Set 'LockDir=/var/lock/cvs/[repository]' (to avoid lock issues for pserver, only need if using pserver for anonymous access)


Also, of note:
- The download link of cvs-1.11.20.tar.bz2 on ccvs.cvshome.org seems rather dead. I had more success with ftp.gnu.org (NB, it's in /non-gnu/)

Hope it helps,
Julien





--
http://linuxfromscratch.org/mailman/listinfo/blfs-dev
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Reply via email to