[cvsnt] Re: cvsnt and chroot jail help

[Tony Hoyle]

Dianne Chen wrote:
> How can I prevent users from directly access
> repository thru shell window? Is this what chroot is
> for - to restrict commands that user can execute
> within shell? 

No, it restricts the directories that cvsnt can access, to stop rogue 
scripts etc. from being able to do things they shouldn't.

Restricting what someone with shell access can do is a different idea. 
The best thing I can thing of is to set RunAsUser to a specially created 
cvs user, then chown the entire repository to that user.  You then need 
to arrange it so that ordinary users cannot read/write that repository.

Tony