Re: cvs-nserver and latest CVS advisory (Was: patch to make CVSchroot)

[Rich Salz]

> No authentication should exist within CVS.  Instead, CVS should be open to
> pluggable authentication.

Since CVS relies on the underlying filesystem for its own authentication
and authorization decisions, this is is one of those things that is much
easier to say than to do.  And even harder to get right.
        /r$