Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 13 Oct 2021 11:12:29 -0700
From:      David Christensen <dpchrist@holgerdanske.com>
To:        questions@freebsd.org
Subject:   Re: best software for managing multiple freebsd & linux machines ?
Message-ID:  <1ce050c5-25fd-33de-02cf-0d847385d023@holgerdanske.com>
In-Reply-To: <YWbkBff4ASHBWmfM@ceres.zyxst.net>
References:  <YWMHYDbyRyAVAhWa@ceres.zyxst.net> <cffbffec-acc0-9d86-f990-1bdab49abfce@holgerdanske.com> <YWbkBff4ASHBWmfM@ceres.zyxst.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On 10/13/21 06:49, tech-lists wrote:
> On Sun, Oct 10, 2021 at 12:20:29PM -0700, David Christensen wrote:
>> I have a SOHO network that I administer using SSH, Vim, CVS, various
>> userland tools, and homebrew scripts (Bourne, Bash, and Perl).  The most
>> important element is a networked version control system.
> 
> I've only ever used cvs in a client context, so please forgive me for
> asking a question that might seem daft - but is there a cvs server on
> each machine you admin?


The CVS repository is in a jail on the server.  It is not really a 
service -- the clients connect via SSH and run the CLI.


Putting CVS in a jail on the server can and has complicated sysadmin 
tasks when I need to work either or both the server and jail.  A 
dedicated machine without the jail would be simpler.


> if yes, are there security issues associated with cvs?


I think there are security issues no matter how you run CVS:

https://www.cvedetails.com/vulnerability-list.php?vendor_id=442&product_id=0&version_id=0&page=1&hasexp=0&opdos=0&opec=0&opov=0&opcsrf=0&opgpriv=0&opsqli=0&opxss=0&opdirt=0&opmemc=0&ophttprs=0&opbyp=0&opfileinc=0&opginf=0&cvssscoremin=0&cvssscoremax=0&year=0&cweid=0&order=1&trc=20&sha=94cfaaf625f54f37acad68e891f591329feb2260


David



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1ce050c5-25fd-33de-02cf-0d847385d023>