Best way to plug the CVS Security hole?

[Mark]

What's the best way to disable the update.prog and checkin.prog functionality?
Currently I have commented out 2 REQ lines  in the source that seem to call
this functionality. Is this the best way to do this?

We don't need the functionality and we are running cvs pserver with a non-root
account from inetd.conf.

Can this (disabling that functionality) be made easier to do in the next
release of CVS?

Thanks,

Mark

__________________________________________________
Do You Yahoo!?
Check out Yahoo! Shopping and Yahoo! Auctions for all of
your unique holiday gifts! Buy at http://shopping.yahoo.com
or bid at http://auctions.yahoo.com