Re: Moving to Pserver from .rhosts

[Fredrik Wendt]

Greg A. Woods wrote, On 2002-11-15 00:49:

> Because it's how remote CVS was designed to be used and because it is
> the only way to make remote CVS access secure.  CVS-pserver is not
> secure in any way whatsoever and cannot be made secure.
>  
That's partly wrong. If you set up the pserver and makes sure (either 
via inetd (hosts.deny/.allow) if that's your preferred way of launching 
it, or iptables etc) that only requests originating from 127.1 gets 
through, then by tunneling localport 2401 to remote port 2401 is 
absolutely secure.

First issue:
ssh -L2401:localhost:2401

Then set your CVSROOT to ":pserver:address@hidden:/repository" and 
off you go.

It has the advantage of not having the user at the cvs server 
adding/rewriting files, but only the user that the pserver runs as 
(which might take some weight of the poor admins burden).

My "two cents" anyway...

/
   Fredrik