[36004] in bugtraq
Re: CVS woes: .cvspass
daemon@ATHENA.MIT.EDU (Andy Dustman)
Fri Aug 6 15:18:42 2004
Message-ID: <9826f38004080610047d8441ed@mail.gmail.com>
Date: Fri, 6 Aug 2004 13:04:29 -0400
From: Andy Dustman <farcepest@gmail.com>
To: Delian Krustev <krustev@krustev.net>
Cc: bugtraq@securityfocus.com, "Greg A. Woods" <woods@weird.com>
In-Reply-To: <200408051252.10109.krustev@krustev.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
On Thu, 5 Aug 2004 12:52:10 +0300, Delian Krustev <krustev@krustev.net> wrote:
> On Wednesday 04 August 2004 23:35, Greg A. Woods wrote:
> > If you think your network is secure enough courtesy other mechanisms
> > then you can use RSH instead of SSH, but DO NOT try to use cvspserver
> > for anything but totally anonymous access.
>
> There's a site outhere. It's sf.net . They demonstrate, with the number
> of projects being hosted there (with pserver access), You're not right
> again.
SourceForge only allows anonymous CVS access through pserver.
Read-write access is through SSH only.