Re: CVS

[Aaron Turner <aturner@linuxkb.org>]

On Sun, 31 Oct 1999, Micah K Yoder wrote:

> Aaron Turner wrote:
> 
> > Well to use ssh you have to have a vaild shell on the "server".   I was
> > looking into using a restricted shell or even a bogus shell to reduce the
> > security risk.  I was able to run some sucessful CVS tests, but then got
> > distracted... you know the rest.
> 
> Yeah... /bin/false, the best shell out there.  :-)

Actually, /bin/false is bad. :-)  Certain systems (not Linux AFAIK)
interpret the output of /bin/false as an error, and will drop the "user"
into a vaild shell as a result.  Hence, you should always use /bin/true
even though it sounds backwards.
 
> This is actually a good idea, assuming we get a lot of people... that
> will allow them to have ssh, cvs, web space, and E-mail forwarding, but
> eliminates the ability to login.

Yeah, we'll have to come up with a list of services that we're willing to
give out to people.  Email forwarding is a no brainer.  Web space isn't a
real problem, except how to we allow people to update their pages (do we
give them usable shell accounts or use ftp or some kind of web management
tool?).  Personally though, I don't hear people begging me for this sort
of thing.  Maybe if people started begging for these kind of services we'd
actually impliment them as policy and actually support them.  Doesn't seem
to be that big of a demand for it though.

--
Aaron Turner, Core Developer       http://vodka.linuxkb.org/~aturner/
Linux Knowledge Base Organization  http://linuxkb.org/
Because world domination requires quality open documentation.