Re: Fine and secure dining, was Re: svnadmin create and not being method agnostic

On 1/5/2011 1:04 PM, David Brodbeck wrote:
>
> It's possible to do secure Subversion. Use svn+ssh access,
> disable or
> block other services at the firewall,
>
>
> If ssh is permitted and you didn't personally set it up, what are
> the odds that port tunneling or ssh's built in socks proxy will
> allow access to every service behind the firewall?
>
>
> The nice thing about SSH is you can disable those things via server
> configuration. They are on by default in most distributions (and maybe
> shouldn't be) but the configuration switches to turn them off are easy
> to find.

Of course you _can_ secure it. My point is that permitting ssh and
restricting access to ssh by itself is very likely to make your system
less secure (if you count on firewall protections) instead of more so.
And nothing that can be done in the default svn installation can fix it.

-- 
   Les Mikesell
    lesmikesell_at_gmail.com