Re: CVS, RSH and direct access to repository

[Nathan Kidd]

Jeeva Sarma wrote:
> I want to know if there is any method to prevent users
> from directly accessing repository.I read of one
> method, using Openssh and restrict users to one
> command, but that would prevent the users from even
> logging on to the machine. Some developers use this
> machine for other purposes(do their regular
> development and stuff).We plan to have CVS server on
> solaris, windows clients using ssh authentication.
> Pls advice.

I haven't done this myself so perhaps someone can point out a flaw in 
this plan, but:

What about setting up a chroot jail that contains your cvs repository 
along with separate cvs user accounts and sshd restricted to the cvs 
command running on a different port.  If your UIDs/GIDs are separate 
then local users (outside the jail) won't have access to the repository. 
The caveat is that for every developer that wants local ssh access in 
addition to cvs access, you'll have to maintain two user accounts.

-Nathan