ssh only for cvs and svn

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
i want to reduce ssh login only for svn and cvs
how should i config sshd ?


Re: ssh only for cvs and svn

Quoted text here. Click to load it

sshd can be configured to accept incoming sessions only for users in
certain groups.

But users in these groups would be allowed to use ssh for anything
else than cvs or svn too.

So what you can do is to create alternate user accounts, with as login
shell some restricted shell that allows them only to use cvs (or svn).

Have a look at:

__Pascal Bourguignon__            /

"What is this talk of "release"?  Klingons do not make software
"releases".  Our software "escapes" leaving a bloody trail of
designers and quality assurance people in its wake."

Re: ssh only for cvs and svn

Pascal Bourguignon wrote:

Quoted text here. Click to load it

You can also review the Subversion documentation and its notes on
setting up SSH authorized keys to *only* permit certain operations, by
limiting the command line options of that key. This is often used with
the SSH+svnserve setup.

Alternatively, Subversion permits HTTPS based access, but the UNIX
clients tend to store the user password locally in clear text: I
consider that a huge security misbehavior, and recommend the SSH based
access for exactly this reason.

CVS, I'd suggest you throw out immediately and switch over to
Subversion, if at all possible.

Re: ssh only for cvs and svn

Quoted text here. Click to load it

You can modify the Restricted Shell in order to accept svn, currently
it accepts cvs.


Research (n.): a discovery already published by a chinese guy one month
               before you, copying a russian who did it in the 60s.

Site Timeline