Jeeva Sarma wrote:
I want to know if there is any method to prevent users
from directly accessing repository.I read of one
method, using Openssh and restrict users to one
command, but that would prevent the users from even
logging on to the machine. Some developers use this
machine for other purposes(do their regular
development and stuff).We plan to have CVS server on
solaris, windows clients using ssh authentication.
Pls advice.

I haven't done this myself so perhaps someone can point out a flaw in this plan, but:


What about setting up a chroot jail that contains your cvs repository along with separate cvs user accounts and sshd restricted to the cvs command running on a different port. If your UIDs/GIDs are separate then local users (outside the jail) won't have access to the repository. The caveat is that for every developer that wants local ssh access in addition to cvs access, you'll have to maintain two user accounts.

-Nathan



_______________________________________________
Info-cvs mailing list
[EMAIL PROTECTED]
http://mail.gnu.org/mailman/listinfo/info-cvs

Reply via email to