On Thursday, April 13, "Brian Huddleston" wrote:
> > The other possibility is to tunnel the pserver over ssh, which most
> > people would consider outright silly, since you can just 'run the server'
> > native in ssh mode.
>
> The advantage of this approach is that you can set developers up as CVS
> users as opposed to real users of your system. While you might trust
> people to have repository access you might not want to trust them shell
> access to your machine.
With an "approriate" shell, this is not a problem. Basically, you can
take the anoncvssh, and turn it into a slightly less restrictive cvssh,
and then give each cvs user who you don't wish to have shell access this
shell...
--Toby.
