Re: Patches: cvs --allow-root=/blah server

2001-04-03 Thread Jan Grant
On Mon, 2 Apr 2001, Larry Jones wrote: Jan Grant writes: I'm a bit stumped as to where patches for this should go. We're looking at running CVS here using :ext:-mode access and ssh, and using sshd's command="cvs --allow-root=/blah server" option to limit people to only

Re: Patches: cvs --allow-root=/blah server

2001-04-03 Thread Jan Grant
On Tue, 3 Apr 2001, Jan Grant wrote: On Mon, 2 Apr 2001, Larry Jones wrote: Jan Grant writes: I'm a bit stumped as to where patches for this should go. We're looking at running CVS here using :ext:-mode access and ssh, and using sshd's command="cvs --allow-root=/blah

Re: Patches: cvs --allow-root=/blah server

2001-04-03 Thread Larry Jones
Jan Grant writes: Oh, and POLA: --allow-root is listed as a "general option"; if it doesn't apply to anything except pserver then it ought to be made a pserver-specific option. It should be a command option but there were technical reasons for making it a global option instead. -Larry

Re: Patches: cvs --allow-root=/blah server

2001-04-03 Thread Larry Jones
Jan Grant writes: In riposte, can I ask: why does pserver need --allow-root? Because pserver typically runs as root and uses the client-supplied root to look for a CVSROOT/passwd file that says who's allowed to log in and who they should run as. If it weren't for --allow-root, someone with

Patches: cvs --allow-root=/blah server

2001-04-02 Thread Jan Grant
I'm a bit stumped as to where patches for this should go. We're looking at running CVS here using :ext:-mode access and ssh, and using sshd's command="cvs --allow-root=/blah server" option to limit people to only runing CVS. Currently the CVS server I have access to (1.11-derived)

Re: Patches: cvs --allow-root=/blah server

2001-04-02 Thread Larry Jones
Jan Grant writes: I'm a bit stumped as to where patches for this should go. We're looking at running CVS here using :ext:-mode access and ssh, and using sshd's command="cvs --allow-root=/blah server" option to limit people to only runing CVS. Since sshd ends up running as the