[Techtalk] Content management systems

[John Clarke]

On Thu, Jul 15, 2004 at 10:22:15AM -0700, Cynthia Kiser wrote:

> If your project only needs read/write privs for folks you trust
> enough to have shell accounts (with or without anonymous read access),
> then just have everyone use ssh rather than pserver to access the

You don't even have to give them full shell access.  With ssh, you can
restrict the commands a user is allowed to run.  To limit a user to cvs
only, put this:

    command="/usr/bin/cvs -d /cvsroot server",no-port-forwarding,
    no-X11-forwarding,no-agent-forwarding 

in front of their key in ~/.ssh/authorized_keys.  Change "-d /cvsroot"
to point to your cvs repository path.


Cheers,

John
-- 
The indication need not be a dialog box; it could be  an icon (for example, 
a picture of a rotting fish) or some other indicator.
            -- RFC 2616 (HTTP/1.1), section 13.1.4