Re: CVS security

[Tobias Weingartner]

On Thursday, April 13, "Brian Huddleston" wrote:
> 
> I think the tunneled pserver approach follows the principle of least
> privelege best.  Although certainly, the pure ssh approach  is easier to
> setup, easier on the clients,  and if you've got a clueful sysadmin that
> stays on top of security maybe having login ports open is not too big a
> deal.  Anyway, that's my $.02.  Take it for what it's worth.

Hmm, I tend to run a quite "minimal" setup for CVS, having only the ssh
port "open" to the outside world.

--Toby.