Re: security, cvs, was Re: interface bindings of x-server

Around 8 o'clock on Nov 19, Carl Worth wrote:

> In the meantime, one option is to drop pserver and just use ssh for
> anonymous CVS access.

Certainly ssh would be better than pserver starting as root, but I think 
pserver starting as 'nobody' is pretty much the same as ssh, and a lot 
easier for people to configure.  The hacked up pserver also doesn't bother 
to check locks, so while you may occasionally get an inconsistent set of 
bits, it doesn't have any impact on other CVS usage.

Now that I understand how pserver "normally" works, I would never let that 
run on a box of mine...

-keith