Subject: Any point to cvs using rsh? (was Re: Anoncvs pointer)
To: NetBSD Current Users <email@example.com>
From: Chuck Yerkes <firstname.lastname@example.org>
Date: 12/12/2002 23:14:09
Quoting Ron Roskens (email@example.com):
> Your missing the "CVS_RSH" environment variable.
> export CVS_RSH=ssh
> setenv CVS_RSH ssh
> and then run the cvs command.
Is there any reason not to just have CVS (and rsync and rdist)
just use ssh by default?
I mitigate it a lot by removing rsh and making it a link to
ssh, but should we "presume" that rsh is useful for ANYTHING?
Sure, let it be there for override (CVS_RSH=rsh), but lets
Between clear passwords and session highjacking, the r* commands
are ready to die. They were Joy's hack in 4.1 (and part of 4.2),
they're still a hack.