[cvsnt] linux host, and ACLs

[bwhicks at aep.com]

cvsnt-bounces at cvsnt.org wrote on 10/20/2006 10:57:51 AM:

> Use :pserver: (or whatever) to access localhost. Use file-level ACLs to 
keep
> your users out... only allow the cvsnt service to read/write the
> repository.
> 
> > 
> > I believe, as Gerhard suggests, the file system ACLs are required.
> > Perhaps even as far as running the CVS server as another user
> > (in Unix terms, as a "SETUID" application) which does have
> > access to the repository.
> 
> That's the simplest solution.

no, the simplest solution is to not use a "server" at all. :local: is the 
simplest solution, and you don't have to worry about firewalls, services 
running as UIDs, or making sure services are running while users are 
trying to do cvs operations. It's all local. 

Brian