2006-05-30 21:24:27 by Thomas Klausner | Files touched by this commit (6) |
Log message: Update to 1.0.11: changes from 1.0.10 to 1.0.11 ----------------------------- * cvsd-buildroot should now install libraries in the same directory structure as on the normal filesystem, resulting in better support for 64 bit systems * other small improvements to cvsd-buildroot, including better error handling and not overwriting devices * small code improvements |
2006-05-21 01:38:16 by Thomas Klausner | Files touched by this commit (10) | |
Log message: Initial import of cvsd, a cvs pserver wrapper that chroots the pserver. Based on the work by Eric Schnoebelen and virtus@ in pkgsrc-wip. DESCR: cvsd is a wrapper program for cvs in pserver mode. It will run 'cvs pserver' under a special uid/gid in a chroot jail. cvsd is run as a daemon and is controlled through a configuration file. It is relatively easy to configure and tools are provided for easily setting up a rootjail. This server can be useful if you want to run a public cvs pserver. You should however be aware of the security limitations of running a cvs pserver. If you want any kind of authentication you should really consider using secure shell as a secure authentication mechanism and transport. Passwords used in cvs pserver are transmitted in plaintext and this wrapper won't change that. This server adds a layer of security to cvs. cvs is a very powerful tool and is capable of running scripts and other things. By running cvs in a rootjail it is possible to limit the amount of "damage" cvs can do if it is exploited. It is generally a good idea to run cvsd without any write permissions to any directory on the system. |