>>>>> "KF" == Karl Fogel <kfo...@red-bean.com> writes:

KF>   4. In ~jrandom/.ssh/authorized_keys, put this line:
KF>      command="/usr/bin/bzr serve --inet --allow-writes 
--directory=/src/bzr" ssh-rsa <<<LONG BASE64 PUBLIC KEY>>> jran...@clientcomment

Using bzr as the auth_key command rather than the restricted shell means
that it will no longer be possible to archive the repos via rsync/ssh.

It also makes it impossible to use sftp or rsync to look at the contents
of the repo to debug issues, such as surprises from moved branches, repo
restructuring, et al.

Those losses should be avoided.  Anon-rsync would work, but rsync/ssh or
sftp are probably the better ways to go.

-JimC
-- 
James Cloos <cl...@jhcloos.com>         OpenPGP: 1024D/ED7DAEA6


Reply via email to