Re: [PATCH]: don't store auth info in world-readable files

David Kimdon <dwhedon@debian.org> writes:
> > This gets mentioned every now and then. .svn/auth/* are world-readable,
> > but .svn/auth is not world-traversable. So I don't see any real security
> > problem here.
>
> hmm, good point, sounds like this patch can be safely ignored.

I'm beginning to think a new patch to the FAQ is called for instead... :-)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Thu Oct 3 16:28:31 2002