Re: security concept - set permissions for each directory - how to?

[Larry Jones]

Wolfgang Kormann writes:
> 
> how can I build a security concept for CVS on SuSe Linux...
>    - I'd like define groups
>    - and it should be possible to set r/w rights on directories for this
> groups
> 
> for example:
[...]
> This should work with pserver and SSH.
> Is this possible ... any ideas???

The way CVS works, a user need read permission on a repository directory
to read files in that directory (checkout, log, status, etc.) and write
permission in a directory to write files in that directory (commit, tag,
etc.).  Your example is more complex that normal Unix permissions can
support, but if SuSe Linux has Access Control Lists (ACLs), they should
be sufficient to do whatever you want.

Note that if you have read-only users, you have to use LockDir= in
CVSROOT/config to put the lock files somewhere other than in the
repository directories since read-only users still have to be able to
create lock files.

-Larry Jones

I've got PLENTY of common sense!  I just choose to ignore it. -- Calvin