We have a CentOS development server that has source code for various projects. Some of the projects are more sensitive than others and for those sensitive projects we'd like to restrict access to only a certain group of developers (all developers are in-house). The catch is all the developers on our server have root access because of the nature of what they're doing (I know, shame on me).
I'm exploring ways to protect certain source code repositories from certain developers and have come up with the following ideas: Encryption like Truecrypt with a password only known by some users, a change root jail, a virtual machine, or a totally separate server. Obviously they all have their pros and cons. I wanted to gather some suggestions and additional ideas. What's the best way to protect source code from prying eyes on a server even from users who have the root password?
Thanks guys! ~Dan