cvsd is a wrapper program for cvs in pserver mode. It will run 'cvs pserver' under a special uid/gid in a chroot jail.
cvsd is run as a daemon and is controlled through a configuration file. It is relatively easy to configure and tools are provided for setting up a rootjail.
These details are provided for information only. No information here is legal advice and should not be used as such.