Re: connection using pserver

[Larry Jones]

Kenneth Porter writes:
> 
> My intention is to run the pserver as a pseudo-user and set the 3rd value
> to that same pseudo-user for all cvs users. This eliminates the need to run
> the pserver as root, which is always a security risk for any service.

It also eliminates the ability to use the system's access controls to
control access to your repository, not to mention any ability to track
any particular action back to a specific user based on the system's
audit trail info.  If you're at all concerned about security, you should
not be using pserver, you should be using :ext: with SSH.

-Larry Jones

Whatever it is, it's driving me crazy! -- Calvin