RE: Security options :-(

[Zieg, Mark]

> > The cvs user id and group id need to be different from all
> > other login users. And set permissions for repository such
> > that the cvs user and group only are given write
> > permissions. This should suffice
>
> And then what?  Use pserver to map the existing user ids to the cvs id?
> 
> I have been trying to figure out a secure way to set this thing up, but 
> each way seems to have big drawbacks.

Method 1.5
   description:
   - users SSH into newly-created accounts that are different from their
     existing accounts (cvsphil, etc)
   - repository has group permissions that allow the newly created (cvsphil)
     accounts to check in and out, etc -- but nobody else (ie, phil)
   - don't use pserver at all.  ever.

   drawback:
   - ???