[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: repository permissions - some general security questions

From: Timothee Besset <timo_at_qeradiant.com>
Date: 2002-07-24 16:53:59 CEST

Well that's my problem. Default httpd config:
User nobody
Group #-1

I'm not sure what this means really .. but it looks to me like way too
many things could be reading and writing in the repository. I know I can
configure apache to run as a specific user/group, but that doesn't really
solve the problem... I'm not sure I want to have my repository at the same
access level as all the other stuff in my web pages.

Then again .. I don't know what the implications are, but wouldn't things
be better if a specific user/group could be defined for the svn repository
area?

TTimo

On Wed, 24 Jul 2002 16:16:25 +0200
Michael Wood <mwood@its.uct.ac.za> wrote:

> On Wed, Jul 24, 2002 at 04:02:07PM +0200, Timothee Besset wrote:
> [snip]
> > My problem is with the repository filesystem itself. The README
> > advises to chmod 777 which give +rw to anything on the system. This is
> > clearly a big hole, and blocker in my case. I want to have at least rw
> > restricted to a specific group.
> [snip]
>
> The user that apache runs as needs write access to the repository. I
> don't think it needs to be world writable.
>
> --
> Michael Wood <mwood@its.uct.ac.za>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: dev-help@subversion.tigris.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Wed Jul 24 17:00:50 2002

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.