[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: cvs security - ssh vs pserver?



Peter Jay Salzman wrote:
> i just found out that using method 2, you can't assign a shell of /bin/false.
> cvs won't work.   so option 2 also means "giving a shell account on my
> machine".

Read http://kitenet.net/programs/sshcvs

> any thoughts?  is pserver really as insecure as dpkg claims in the
> configuration of the package?

It uses plain-text passwords, which is pretty insecure, yes.

-- 
see shy jo



Reply to: