Re: Moving to Pserver from .rhosts

[Mike Ayers]

Greg A. Woods wrote:

[ On Friday, November 15, 2002 at 11:17:10 (-0800), Shankar Unni wrote: ]

Subject: RE: Moving to Pserver from .rhosts

Greg opines:

Then you have no accountability in your CVS repository.  None.

You have as much accountability as you have from ssh and the passwd
file: you know the name of the person (from the pserver passwd file),
and that is recorded in the repository.

No you don't.  CVS is not a security application.  It was not designed
to be one and it cannot ensure any (i.e. not any at all) level of
accountabilty.  None whatsoever.  Nil.  Zilch.  Zip.  Zero.  Negative even.

If you think otherwise you are sadly mistaken and seriously fooling
yourself into a complete and utterly false sense of security.

Stupid questions for blowhards time:

When did anyone in this thread actually *ask* how to secure their CVS server?


/|/|ike




_______________________________________________
Info-cvs mailing list
[EMAIL PROTECTED]
http://mail.gnu.org/mailman/listinfo/info-cvs