[lug] securing cvs

[Tkil]

>>>>> "DS" == D Stimits <stimits at idcomm.com> writes:

DS> Assuming there is a desire to make some form of anonymous
DS> read-only cvs available on a RH 7.1 box, what is the best way to
DS> do this without leaving a lot of holes? And assuming that possibly
DS> there is to be read-write access to others, I am assuming the ssh
DS> version of the RSH should be used. Can anyone give some advice on
DS> making anonymous cvs available securely (and yes, assume that it
DS> must be done, so not doing it isn't the option)?

there was a howto on this... let me see if i can find it:

  http://freshmeat.net/projects/idx-chrooted-ssh-cvs/

it appears to be a bit more than just a how-to, but it seems to be a
fairly paranoid way of looking at things.

t.