Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Message-ID: <3E8C5EB4.3080109@lapo.it>
Date: Thu, 03 Apr 2003 18:17:56 +0200
From: Lapo Luchini <lapo AT lapo DOT it>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4a) Gecko/20030322
X-Accept-Language: it, en, fr, es
MIME-Version: 1.0
To: Mailing List: CygWin <cygwin AT cygwin DOT com>
Subject: Ever needed a CVS-only shell?
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit

Today I finally solved one of the problems that I have since a long 
time: how to let people access CVS via SSH but not give them shell access.

It was *much* easier than expected, but real strange for a person that 
uses Windows a lot: it wouldn't certainly permit to have a .BAT as a 
shell...

--[ /usr/local/bin/cvsonly ]---------------------------
#!/bin/sh

if [ "$*" != "-c cvs server" ]; then
  echo "CVS Only!";
  exit;
fi;
cvs server
--[ /usr/local/bin/cvsonly ]---------------------------

Maybe it's not perfect or secure as possible, but it's always better 
that using a "normal" shell ^_^

-- 
Lapo 'Raist' Luchini
lapo AT lapo DOT it (PGP & X.509 keys available)
http://www.lapo.it (ICQ UIN: 529796)



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/