info-cvs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: --allow-root and init via SSH


From: Larry Jones
Subject: Re: --allow-root and init via SSH
Date: Tue, 11 Dec 2001 13:12:06 -0500 (EST)

Greg A. Woods writes:
> 
> > Is --allow-root evaluated for "cvs server" in the current development
> > version, or is it at least on the todo list? 
> 
> Now you're really asking for trouble.  Generally speaking the superuser
> account should never be used directly from remote (though with
> tremendous care in implementation and use one might use per-person SSH
> keys that give a solid audit trail of who accessed the account, and
> there are arguments suggesting such a configuration is more secure than
> using 'su').

He was speaking of the CVS --allow-root= option that specifies (for
pserver) what the allowable CVSROOT directories are.

-Larry Jones

Hey!  What's the matter?  Can't you take a joke?!  It was a JOKE! -- Calvin



reply via email to

[Prev in Thread] Current Thread [Next in Thread]