version 1.2, 1996/05/13 23:47:51 |
version 1.3, 1996/06/22 13:30:06 |
|
|
X |
X |
Xcompile the anoncvssh binary |
Xcompile the anoncvssh binary |
X in the Makefile, change the variable CVSROOT |
X in the Makefile, change the variable CVSROOT |
X anoncvs is installed setuid-root. |
X install the binary setuid-root. |
X |
X |
Xcreate an account: |
Xcreate an account: |
X anoncvs::32766:32766:Anonymous CVS User:/open/anoncvs:/open/anoncvssh |
X anoncvs::32766:32766:Anonymous CVS User:/open/anoncvs:/open/anoncvssh |
|
|
X |
X |
Xinstall a crontab entry which runs as any user besides anoncvs (ie. run |
Xinstall a crontab entry which runs as any user besides anoncvs (ie. run |
Xit as yourself, or as root). call that user $SUPUSER |
Xit as yourself, or as root). call that user $SUPUSER |
X 0 5,9,13,17,21,1 * * * /usr/local/bin/sup -v /open/sup/ss |
X 0 */3 * * 0,1,3,4,6 /usr/local/bin/sup -v /open/sup/ss |
|
X 0 */6 * * 2,5 /usr/local/bin/sup -vo /open/sup/ss |
X |
X |
|
Xanoncvs1.usa.openbsd.org uses this particular set of entries. A `sup |
|
X-o' is done every few days because sup is not very robust. |
|
X |
Xthe file /open/sup/ss contains |
Xthe file /open/sup/ss contains |
X cvs host=cvs.openbsd.org hostbase=/ base=/open/anoncvs delete |
X cvs host=cvs.openbsd.org hostbase=/ base=/open/anoncvs delete |
X |
X |
|
|
X cp /etc/{pwd.db,resolv.conf,services,ttys} etc/ |
X cp /etc/{pwd.db,resolv.conf,services,ttys} etc/ |
X modify these files to suit your idea of system security |
X modify these files to suit your idea of system security |
X |
X |
Xanoncvssh (by setting an extra environment variable) use an extension |
Xanoncvssh (by setting the environment variable CVSREADONLYFS) uses an |
Xprovided in the openbsd cvs server code. therefore you want to compile |
Xtiny extension provided in the openbsd cvs server code which permits |
Xthe openbsd version. luckily this is not a problem on a non-openbsd |
Xthe use of read-only cvs repositories. therefore you MUST compile the |
Xmachine since the cvs sources are imported verbatim into the openbsd |
Xopenbsd version of cvs. luckily this is not a problem on a |
Xtree. they are in gnu/usr.bin/cvs. (explanation: the extension allows |
Xnon-openbsd machine since the cvs sources are imported verbatim into |
Xa way to have read-only cvs repositories) |
Xthe openbsd tree. they are in gnu/usr.bin/cvs. The sources are |
|
Xintegrated such that Makefile.bsd-wrapper knows how to build the |
|
Xsources on an OpenBSD machine, using obj directories. |
X |
X |
Xcreate tmp space for the account |
Xcreate tmp space for the account |
X cd var; ln -s ../tmp tmp |
X cd var; ln -s ../tmp tmp |
|
|
Xas a final pass, make sure that all the files you have just created are |
Xas a final pass, make sure that all the files you have just created are |
Xnot world writeable (except dev/null) |
Xnot world writeable (except dev/null) |
X |
X |
Xsend mail to deraadt@openbsd.org to have sup permissions granted. |
Xsend mail to deraadt@openbsd.org |
|
X1) to have sup permissions granted. |
|
X2) to have an anoncvsN.COUNTRY.openbsd.org alias created |
|
X3) to have your site mentioned in the http://www.openbsd.org page. |
|
X |
|
X |
|
XExample layout. In this example "deraadt" is the $SUPUSER. |
|
X |
|
X[eap open 5 ]> cd /open |
|
X[eap open 6 ]> ls -alF |
|
Xtotal 46 |
|
Xdrwxr-xr-x 7 root wheel 512 Feb 20 09:58 ./ |
|
Xdrwxr-xr-x 17 root wheel 512 Jun 14 14:05 ../ |
|
Xdrwxr-xr-x 9 root wheel 512 Jan 3 21:55 anoncvs/ |
|
X---s--x--x 1 root bin 16384 Nov 30 1995 anoncvssh* |
|
Xlrwxr-xr-x 1 root wheel 11 Jan 3 21:52 cvs@ -> anoncvs/cvs |
|
Xdrwxr-xr-x 5 root wheel 512 Feb 22 13:22 ftp/ |
|
Xdrwxrwxrwt 2 anoncvs wheel 1024 Jan 1 13:18 lost+found/ |
|
Xdrwxr-xr-x 4 root wheel 512 Nov 30 1995 src/ |
|
Xdrwxrwxr-x 3 deraadt wheel 512 Dec 4 1995 sup/ |
|
X[eap open 7 ]> cd anoncvs |
|
X[eap anoncvs 8 ]> ls -alF |
|
Xtotal 20 |
|
Xdrwxr-xr-x 9 root wheel 512 Jan 3 21:55 ./ |
|
Xdrwxr-xr-x 7 root wheel 512 Feb 20 09:58 ../ |
|
X-r--r--r-- 1 root wheel 0 Nov 30 1995 .hushlogin |
|
X-r--r--r-- 1 root wheel 188 Nov 30 1995 .plan |
|
X-r--r--r-- 1 root wheel 0 Nov 29 1995 .profile |
|
Xdrwxrwxrwx 2 deraadt wheel 512 Nov 29 1995 bin/ |
|
Xdrwxrwxr-x 6 deraadt cvs 512 Jun 16 20:28 cvs/ |
|
Xdrwxr-xr-x 2 root wheel 512 Nov 30 1995 dev/ |
|
Xdrwxr-xr-x 2 root wheel 512 Nov 29 1995 etc/ |
|
Xdrwxrwxrwx 3 root wheel 512 Jun 22 07:42 tmp/ |
|
Xdrwxr-xr-x 5 deraadt wheel 512 Nov 30 1995 usr/ |
|
Xdrwxr-xr-x 2 root wheel 512 Jan 3 21:55 var/ |
|
X[eap anoncvs 8 ]> ls -alFR bin usr tmp etc dev |
|
Xbin: |
|
Xtotal 948 |
|
Xdrwxrwxrwx 2 deraadt wheel 512 Nov 29 1995 ./ |
|
Xdrwxr-xr-x 9 root wheel 512 Jan 3 21:55 ../ |
|
X--wx--x--x 1 deraadt wheel 40960 Jun 18 09:45 cat* |
|
X--wx--x--x 1 deraadt wheel 40960 Jun 18 09:45 pwd* |
|
X--wx--x--x 1 deraadt wheel 122880 Jun 18 09:45 rm* |
|
X--wx--x--x 1 deraadt wheel 262144 Jun 18 09:45 sh* |
|
X |
|
Xdev: |
|
Xtotal 4 |
|
Xdrwxr-xr-x 2 root wheel 512 Nov 30 1995 ./ |
|
Xdrwxr-xr-x 9 root wheel 512 Jan 3 21:55 ../ |
|
Xcrw-rw-rw- 1 root wheel 2, 2 Nov 30 1995 null |
|
X |
|
Xetc: |
|
Xtotal 112 |
|
Xdrwxr-xr-x 2 root wheel 512 Nov 29 1995 ./ |
|
Xdrwxr-xr-x 9 root wheel 512 Jan 3 21:55 ../ |
|
X-rw-r--r-- 1 root wheel 252 Nov 29 1995 group |
|
X-rw-r--r-- 1 root wheel 296 Nov 29 1995 hosts |
|
X-rw-r--r-- 1 root wheel 540 Nov 29 1995 passwd |
|
X-rw-r--r-- 1 root wheel 1094 Nov 29 1995 protocols |
|
X-rw-r--r-- 1 root wheel 40960 Nov 29 1995 pwd.db |
|
X-rw-r--r-- 1 root wheel 89 Nov 29 1995 resolv.conf |
|
X-rw-r--r-- 1 root wheel 5529 Nov 29 1995 services |
|
X-rw-r--r-- 1 root wheel 1361 Nov 29 1995 ttys |
|
X |
|
Xusr: |
|
Xtotal 10 |
|
Xdrwxr-xr-x 5 deraadt wheel 512 Nov 30 1995 ./ |
|
Xdrwxr-xr-x 9 root wheel 512 Jan 3 21:55 ../ |
|
Xdrwxr-xr-x 2 deraadt wheel 512 Nov 30 1995 bin/ |
|
Xdrwxr-xr-x 2 deraadt wheel 1024 Jun 18 09:50 lib/ |
|
Xdrwxr-xr-x 2 deraadt wheel 512 Nov 29 1995 libexec/ |
|
X |
|
Xusr/bin: |
|
Xtotal 1968 |
|
Xdrwxr-xr-x 2 deraadt wheel 512 Nov 30 1995 ./ |
|
Xdrwxr-xr-x 5 deraadt wheel 512 Nov 30 1995 ../ |
|
X--wx--x--x 1 deraadt wheel 73728 Jun 18 09:46 ci* |
|
X--wx--x--x 1 deraadt wheel 73728 Jun 18 09:46 co* |
|
X--wx--x--x 1 deraadt wheel 317787 Jun 18 09:46 cvs* |
|
X--wx--x--x 1 deraadt wheel 73728 Jun 18 09:46 diff* |
|
X--wx--x--x 1 deraadt wheel 24576 Jun 18 09:46 diff3* |
|
X--wx--x--x 1 deraadt wheel 90112 Jun 18 09:46 gzip* |
|
X--wx--x--x 1 deraadt wheel 73728 Jun 18 09:46 rcs* |
|
X--wx--x--x 1 deraadt wheel 65536 Jun 18 09:46 rcsclean* |
|
X--wx--x--x 1 deraadt wheel 57344 Jun 18 09:46 rcsdiff* |
|
X--wx--x--x 1 deraadt wheel 3228 Jun 18 09:46 rcsfreeze* |
|
X--wx--x--x 1 deraadt wheel 57344 Jun 18 09:46 rcsmerge* |
|
X--wx--x--x 1 deraadt wheel 57344 Jun 18 09:46 rlog* |
|
X--wx--x--x 1 deraadt wheel 24576 Jun 18 09:46 sdiff* |
|
X--wx--x--x 1 deraadt wheel 2006 Jun 18 09:46 zdiff* |
|
X |
|
Xusr/lib: |
|
Xtotal 5594 |
|
Xdrwxr-xr-x 2 deraadt wheel 1024 Jun 18 09:50 ./ |
|
Xdrwxr-xr-x 5 deraadt wheel 512 Nov 30 1995 ../ |
|
X-rw-r--r-- 1 deraadt wheel 16665 Jun 18 09:50 libacl.so.4.0 |
|
X-rw-r--r-- 1 deraadt wheel 351730 Jun 18 09:50 libc.so.12.3 |
|
X-rw-r--r-- 1 deraadt wheel 377359 Jun 18 09:50 libc.so.12.6 |
|
X-rw-r--r-- 1 deraadt wheel 16608 Jun 18 09:50 libcrypt.so.0.0 |
|
X-rw-r--r-- 1 deraadt wheel 16465 Jun 18 09:50 libcrypt.so.1.0 |
|
X-rw-r--r-- 1 deraadt wheel 44424 Jun 18 09:50 libcurses.so.2.1 |
|
X-rw-r--r-- 1 deraadt wheel 86198 Jun 18 09:50 libcurses.so.3.0 |
|
X-rw-r--r-- 1 deraadt wheel 42254 Jun 18 09:50 libdes.so.4.1 |
|
X-rw-r--r-- 1 deraadt wheel 66099 Jun 18 09:50 libedit.so.0.0 |
|
X-rw-r--r-- 1 deraadt wheel 43131 Jun 18 09:50 libform.so.0.0 |
|
X-rw-r--r-- 1 deraadt wheel 387976 Jun 18 09:50 libg++.so.2.0 |
|
X-rw-r--r-- 1 deraadt wheel 305738 Jun 18 09:50 libg++.so.27.1 |
|
X-rw-r--r-- 1 deraadt wheel 25544 Jun 18 09:50 libgnumalloc.so.0.0 |
|
X-rw-r--r-- 1 deraadt wheel 42696 Jun 18 09:50 libiberty.so.0.0 |
|
X-rw-r--r-- 1 deraadt wheel 25282 Jun 18 09:50 libkadm.so.4.0 |
|
X-rw-r--r-- 1 deraadt wheel 16610 Jun 18 09:50 libkafs.so.4.0 |
|
X-rw-r--r-- 1 deraadt wheel 25539 Jun 18 09:50 libkdb.so.4.0 |
|
X-rw-r--r-- 1 deraadt wheel 59943 Jun 18 09:50 libkrb.so.4.0 |
|
X-rw-r--r-- 1 deraadt wheel 25328 Jun 18 09:50 libkvm.so.4.0 |
|
X-rw-r--r-- 1 deraadt wheel 102104 Jun 18 09:50 libm.so.0.1 |
|
X-rw-r--r-- 1 deraadt wheel 26540 Jun 18 09:50 libmenu.so.0.0 |
|
X-rw-r--r-- 1 deraadt wheel 44424 Jun 18 09:50 libocurses.so.2.1 |
|
X-rw-r--r-- 1 deraadt wheel 16881 Jun 18 09:50 libpanel.so.0.0 |
|
X-rw-r--r-- 1 deraadt wheel 60222 Jun 18 09:50 libpcap.so.0.0 |
|
X-rw-r--r-- 1 deraadt wheel 25060 Jun 18 09:50 libresolv.so.1.0 |
|
X-rw-r--r-- 1 deraadt wheel 16465 Jun 18 09:50 libresolv.so.2.0 |
|
X-rw-r--r-- 1 deraadt wheel 33538 Jun 18 09:50 libskey.so.0.0 |
|
X-rw-r--r-- 1 deraadt wheel 25764 Jun 18 09:50 libss.so.4.0 |
|
X-rw-r--r-- 1 deraadt wheel 277954 Jun 18 09:50 libstdc++.so.27.1 |
|
X-rw-r--r-- 1 deraadt wheel 16835 Jun 18 09:50 libtelnet.so.1.0 |
|
X-rw-r--r-- 1 deraadt wheel 16691 Jun 18 09:50 libtermcap.so.0.0 |
|
X-rw-r--r-- 1 deraadt wheel 16691 Jun 18 09:50 libtermlib.so.0.0 |
|
X-rw-r--r-- 1 deraadt wheel 75039 Jun 18 09:50 libtermlib.so.1.0 |
|
X-rw-r--r-- 1 deraadt wheel 16625 Jun 18 09:50 libutil.so.3.1 |
|
X-rw-r--r-- 1 deraadt wheel 25628 Jun 18 09:50 libutil.so.3.2 |
|
X |
|
Xusr/libexec: |
|
Xtotal 100 |
|
Xdrwxr-xr-x 2 deraadt wheel 512 Nov 29 1995 ./ |
|
Xdrwxr-xr-x 5 deraadt wheel 512 Nov 30 1995 ../ |
|
X-rwxr-xr-x 1 deraadt wheel 49152 Jun 18 09:47 ld.so* |
|
X |
|
X[eap anoncvs 14 ]> ls cvs |
|
XCVSROOT/ src/ sup/ www/ |
|
X[eap anoncvs 15 ]> ls /open |
|
X[eap anoncvs 16 ]> ls -alF sup |
|
Xtotal 8 |
|
Xdrwxrwxr-x 3 deraadt wheel 512 Dec 4 1995 ./ |
|
Xdrwxr-xr-x 7 root wheel 512 Feb 20 09:58 ../ |
|
Xdrwxr-xr-x 2 deraadt wheel 512 Jun 22 06:05 cvs/ |
|
X-rw-rw-r-- 1 deraadt wheel 54 Dec 4 1995 ss |
|
X |
|
X |
|
XThat's pretty much it. |
END-of-README |
END-of-README |
echo x - Makefile |
echo x - Makefile |
sed 's/^X//' >Makefile << 'END-of-Makefile' |
sed 's/^X//' >Makefile << 'END-of-Makefile' |