I would like to allow some users to read/write Bazaar repositories on a server using ssh.
I read about using bzr_ssh_path_limiter (with restricted ssh keys) which is a nice tool and seems to do the work. I've also seen that it is possible to use sftp for bazaar.
- Is bazaar ("bzr serve") secure enough that the client cannot execute any shell commands?
- Should I use sftp? Can I restrict access to a folder? and disallow shell commands?