Recently I found that cvs is doing permissions checking wrong, failing
to allow operations that should succeed to a secondary gid.

I think this caused the problems:

  RCS file: /NETBSD-CVS/src/gnu/usr.bin/cvs/Makefile.inc,v

  revision 1.5
  date: 2003/09/25 16:10:52;  author: christos;  state: Exp;  lines: +3 -2
  Build with setxid support.

With SETXID_SUPPORT removed from
/usr/src/gnu/usr.bin/ssh/Makefile.inc, the cvs binary seems to work
correctly (when used via ssh with no sgid/suid stuff) on repositories
that are 770 with a user getting access only via a non-primary gid.

I will file a PR shortly.

-- 
        Greg Troxel <gdt@ir.bbn.com>