Re: File permissions (Was: Re: pserver vs. ssh - performance ...)

[Larry Jones]

Hugo van der Merwe writes:
> 
> Now I wonder, as any of those users can modify any file in this
> structure, is "trust" the only way I can stop them from messing with my
> other projects?

The way you have things currently set up, yes.

> (Must I create a second repository with different "group
> ownership" for this?)

You don't have to go that far -- you can set the ownership of different
directories in a single repository so that only users in a particular
group can read and/or write them.

> Secondly, with any user being able to modify
> CVSROOT, as what user does the commands get executed, e.g. commit mails
> from commitinfo... these run as the user doing the commit I assume? 

That's correct.

> That
> means any user can cause any other user to run an arbitrary command as
> himself... ?

That's also correct.  But CVSROOT is just a directory like any other
directory -- if you change it to be owned by a different group and only
give that group write privilege, then only memebers of that group will
be able to change the files in it.

-Larry Jones

I keep forgetting that rules are only for little nice people. -- Calvin