From owner-freebsd-questions  Fri May 31  3:15:38 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from dire.bris.ac.uk (dire.bris.ac.uk [137.222.10.60])
	by hub.freebsd.org (Postfix) with ESMTP id 211CA37B404
	for <freebsd-questions@freebsd.org>; Fri, 31 May 2002 03:15:32 -0700 (PDT)
Received: from mail.ilrt.bris.ac.uk by dire.bris.ac.uk with SMTP-PRIV 
          with ESMTP; Fri, 31 May 2002 11:15:19 +0100
Received: from cmjg (helo=localhost)	by mail.ilrt.bris.ac.uk 
          with local-esmtp (Exim 3.16 #1)	id 17DjPn-000232-00;
          Fri, 31 May 2002 11:13:47 +0100
Date: Fri, 31 May 2002 11:13:47 +0100 (BST)
From: Jan Grant <Jan.Grant@bristol.ac.uk>
X-X-Sender: cmjg@mail.ilrt.bris.ac.uk
To: Roman Neuhauser <neuhauser@bellavista.cz>
Cc: freebsd-questions <freebsd-questions@freebsd.org>
Subject: Re: cvs repo owned by a nonroot user
In-Reply-To: <20020530143458.GE20796@freepuppy.bellavista.cz>
Message-ID: <Pine.GSO.4.44.0205311111200.29324-100000@mail.ilrt.bris.ac.uk>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Thu, 30 May 2002, Roman Neuhauser wrote:

>     ok. so all I can do is chown the repo dir to cvs:cvs (allowing only
>     users in that group), right?
>
>     I have an odd feeling I've read somewhere cvs *could* be run by a
>     non-root user...  Anyway, thanks for the info.

Not using the standard pserver setup without some hackery, no. "cvs
server" will run as a normal user; that's quite often used for
tunnelling cvs connections over ssh.
(I've a brief writeup of this here: http://ioctl.org/unix/cvs/ and
there's also some info on the FreeBSD developer website.)

However, you should note that unless you hack cvs (again), various
tricks can be used to run programs on the CVS server as the effective
user.


-- 
jan grant, ILRT, University of Bristol. http://www.ilrt.bris.ac.uk/
Tel +44(0)117 9287088 Fax +44 (0)117 9287112 RFC822 jan.grant@bris.ac.uk
There's no convincing English-language argument that this sentence is true.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message