Re: CVS security: networked filesystems like AFS, client server,ssh

[Brett Neumeier]

> I understand how to secure CVS on a networked filesystem like AFS.
> First, make sure that CVS has no set-user-id components.
> Then, make sure that the ACLs for the repository are set correctly.
> Then, manage Kerberos authentication.
> This is straightforward, and does not require auditting CVS source code.
> It relies on whatever security auditing or trust you have in the
> networked filesystem.

Maybe I'm just missing something, but why wouldn't you just set up
Kerberos and use the GSSAPI connection method to access the CVS server?

Regards,

Brett Neumeier