Annotation of src/usr.bin/cvs/cvsd.8, Revision 1.1.1.1
1.1 jfb 1: .\" $OpenBSD: pflogd.8,v 1.24 2004/01/16 10:45:49 jmc Exp $
2: .\"
3: .\" Copyright (c) 2004 Jean-Francois Brousseau <jfb@openbsd.org>
4: .\"
5: .\" Redistribution and use in source and binary forms, with or without
6: .\" modification, are permitted provided that the following conditions
7: .\" are met:
8: .\" 1. Redistributions of source code must retain the above copyright
9: .\" notice, this list of conditions and the following disclaimer.
10: .\" 2. Redistributions in binary form must reproduce the above copyright
11: .\" notice, this list of conditions and the following disclaimer in the
12: .\" documentation and/or other materials provided with the distribution.
13: .\" 3. The name of the author may not be used to endorse or promote products
14: .\" derived from this software without specific prior written permission.
15: .\"
16: .\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
17: .\" IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
18: .\" OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
19: .\" IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
20: .\" INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
21: .\" NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
22: .\" DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
23: .\" THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
24: .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
25: .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
26: .\"
27: .Dd May 16, 2004
28: .Dt CVSD 8
29: .Os
30: .Sh NAME
31: .Nm cvsd
32: .Nd Concurrent Versions System daemon
33: .Sh SYNOPSIS
34: .Nm cvsd
35: .Op Fl dfpv
36: .Op Fl a Ar aclfile
37: .Op Fl r Ar cvsroot
38: .Op Fl s Ar sockpath
39: .Sh DESCRIPTION
40: The
41: .Nm
42: daemon manages access to a CVS repository.
43: It provides a much more secure alternative to the traditional client-server
44: model commonly used by
45: .Xr cvs 1
46: through various mechanisms described below.
47: .Pp
48: On startup,
49: .Nm
50: spawns a child process that chroots to the CVS repository's root directory.
51: Both processes then drop privileges to user and group
52: .Ic _cvsd .
53: Once this is done, the child process loads the list of ACLs and opens a local
54: socket on which it listens for requests.
55: The parent process' only purpose is to answer requests for things outside of
56: the child's jail.
57: .Pp
58: In order to enforce ACLs and prevent users from modifying the files in the
59: repository directly, all of the files within the repository should be owned
60: by the user and group
61: .Ic _cvsd
62: and should only be writable by the user.
63: .Pp
64: The options are as follows:
65: .Bl -tag -width "-s sockpath"
66: .It Fl a Ar aclfile
67: Use
68: .Ar aclfile
69: as the source file for the Access Control Lists to apply on the repository.
70: .It Fl d
71: Start the server with debugging enabled.
72: This option overrides the
73: .Fl v
74: option.
75: .It Fl f
76: Stay in foreground instead of performing the usual operations to become
77: a daemon.
78: This causes all log messages to be printed on standard input or standard
79: error, depending on the priority of each message.
80: .It Fl p
81: On startup, perform a check on the whole contents of the CVS repository to
82: check file permissions and ownership, and print warnings for any files or
83: directories that do not match the expected permission masks.
84: When running with this option,
85: .Nm
86: will exit with an error message if any of the files have permissions that are
87: too open.
88: .It Fl r Ar cvsroot
89: Use
90: .Ar cvsroot
91: as the CVS repository's root directory.
92: .It Fl s Ar sockpath
93: Use the path specified by
94: .Ar sockpath
95: as the file to bind to for the local socket.
96: .It Fl v
97: Be verbose.
98: .Sh FILES
99: .Bl -tag -width /var/run/cvsd.sock -compact
100: .It Pa /var/run/cvsd.pid
101: Process ID of the currently running
102: .Nm .
103: .It Pa /var/run/cvsd.sock
104: Default listening socket for incoming cvs requests.
105: .El
106: .Sh SEE ALSO
107: .Xr cvs 1 ,
108: .Xr rcs 1 ,
109: .Xr rcsfile 5 ,
110: .Xr cvsacl 5
111: .Sh HISTORY
112: The
113: .Nm
114: server appeared as part of the OpenCVS project.
115: .Sh AUTHORS
116: .An Jean-Francois Brousseau