Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 31 May 2002 11:13:47 +0100 (BST)
From:      Jan Grant <Jan.Grant@bristol.ac.uk>
To:        Roman Neuhauser <neuhauser@bellavista.cz>
Cc:        freebsd-questions <freebsd-questions@freebsd.org>
Subject:   Re: cvs repo owned by a nonroot user
Message-ID:  <Pine.GSO.4.44.0205311111200.29324-100000@mail.ilrt.bris.ac.uk>
In-Reply-To: <20020530143458.GE20796@freepuppy.bellavista.cz>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 30 May 2002, Roman Neuhauser wrote:

>     ok. so all I can do is chown the repo dir to cvs:cvs (allowing only
>     users in that group), right?
>
>     I have an odd feeling I've read somewhere cvs *could* be run by a
>     non-root user...  Anyway, thanks for the info.

Not using the standard pserver setup without some hackery, no. "cvs
server" will run as a normal user; that's quite often used for
tunnelling cvs connections over ssh.
(I've a brief writeup of this here: http://ioctl.org/unix/cvs/ and
there's also some info on the FreeBSD developer website.)

However, you should note that unless you hack cvs (again), various
tricks can be used to run programs on the CVS server as the effective
user.


-- 
jan grant, ILRT, University of Bristol. http://www.ilrt.bris.ac.uk/
Tel +44(0)117 9287088 Fax +44 (0)117 9287112 RFC822 jan.grant@bris.ac.uk
There's no convincing English-language argument that this sentence is true.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.GSO.4.44.0205311111200.29324-100000>