disable cvs commit and/or make repository read-only

[Robert Dodier]

Hello,

I am considering converting an existing CVS repository to Subversion.
After that I'd like to make it impossible to commit stuff to CVS
to avoid heartbreak, confusion, etc.

What is the standard practice for making a CVS repository read-only?

I've searched this ng for ideas and didn't come up with anything clear
to me.
One idea was to modify the file system permissions but wouldn't
it be better to do it through CVS itself? (Instead of letting CVS try
to commit stuff and fail.)

Anyway I welcome your comments.

Robert Dodier