cvs and security

[Peter Jay Salzman <p@dirac.org>]

hi all,

i'd like to set up a cvs repository for remote users.

i recently found that cvs ssh access seems to require that i give remote
users a shell account on my computer.  

but i've heard that pserver is very insecure.

i don't know what to do.   one thing is for damn sure.  i don't want people
having shell accounts on my machine.

is pserver really as insecure as i've heard?

is there a way to use ssh for cvs without giving people shell access on my
machine?   giving user cvs a shell of /bin/false seems to screw up cvs.

help!!

pete

-- 
PGP Fingerprint: B9F1 6CF3 47C4 7CD8 D33E  70A9 A3B9 1945 67EA 951D
PGP Public Key:  finger p@dirac.org