Skip Links

DNSstuff.com
Get information about your IP
IP Information
50+ On-demand DNS and network tools

Software

Videos

rssRss Feed
Get instant email notification when white papers, webcasts, executive guides are added to our library.  Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.
Audio

Flash vs Silverlight for king of Web multimedia. Listen now!

Network World Panorama

Tech vendors are like high school. Listen now!

Network World's Twisted Pair

Additional Resources

RSS

FEATURED REPORTS

Executive Guide: Storage Heats Up HP

Get the latest on storage technologies that allow IT professionals to better cope with new IT demands. Learn how storage technologies can help you successfully tackle e-Discover, regulatory compliance, green data center initiatives and the data explosion. Get all the details now.

RSS

FEATURED WEBCASTS

HP Live Webcast: Create a more efficient NOC HP

HP's Network Lifestyle Management can help you automate network processes and improve NOC efficiency. This webinar is part three of a four part series on Business Services Management (BSM) evolution to help you better align IT with business objectives. Register for this event scheduled for Wednesday, January 30, 2008 at 11:00 a.m. PDT/2:00 p.m. EDT to learn more. Register for this live webcast now.

IT Buyer's Guides

View All Buyer's Guides

Free Newsletters

Sign up and receive the latest news, reviews and trends on your favorite technology topics

Save The Date!
What They Are Saying

So the line of defence remains is "PIN NUMBER" Wowww what a strong security ? HSBC , invest some money...- Anonymous

Join the Discussion

Partner Content
CA logo

CA Network & Voice Resource Center

Comprehensive Network & Voice Management Visit CA Network & Voice Management Resource Center and get insights into industry best practices, information that helps you to address your challenges.

CA Network & Voice Management Resource Center

whitepaper

Managing Voice Over IP for Successful Convergence

Voice over IP (VoIP) has much to offer in cost savings but some customers have concerns about VoIP call quality compared to the quality of traditional voice services. This white paper will help you learn how to take the right steps so that voice quality is assured.

Managing VoIP for Successful Convergence

whitepaper

The Changing Face of Network Management

Managing your network is serious business. This paper discusses the benefits of integrating configuration change-awareness into your network fault management solution

Download Whitepaper

Securing a public CVS system

Dr. Internet By Steve Blass , Network World , 07/17/2006
Steve Blass
  • Social Web 
  • Email 
  • Feedback 
  • Close

What's the best way to secure a public Concurrent Version System repository that allows for anonymous read-only access using the standard pserver connection protocol for CVS?

Try the cvsd program, a wrapper for running CVS in a change root (chroot) "jail" on most Unix-type systems. Using cvsd to run the public CVS pserver in a restricted chroot jail protects the system by limiting the amount of damage that could be done if CVS were exploited.

The cvsd program is used by SourceForge.net to provide anonymous CVS access for SourceForge projects.

To install cvsd, you need to have CVS installed. Then download the cvsd package and follow the installation instructions, paying special attention to the user-id, group-id and file permission settings to ensure that a secure chroot environment is created.

Binary packages are available for Debian, Fedora, FreeBSD and GenToo Linux installs. For other systems, you have to download and build the source package. After installing and configuring cvsd, create or copy the public CVS repository containing the files you want to share with the world, and open up the CVS port in your firewall to allow pserver connections to cvsd.

While it's possible to provide read/write access for privileged users, many systems have a working CVS repository reachable only through SSH and maintain a public read-only copy in a separate directory managed by cvsd.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to moderator approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.
First Name
Last Name
E-mail
Zip Code