Re: working copy is web-accessible, .svn/auth/* retrievable

I wrote:

> > svn co http://blah.blah/svn/homepage ~/public_html

Brane wrote:

> <Directory /home/ahuxley>
> <Files .svn>
> Order deny, allow
> Deny from all
> </Files>
> <Directory>

I'd rather not solve a 'uid=alexis' problem, with a 'uid=root'
solution; just seems like I shouldn't have to switch hats just to
fix a personal problem.

> Run Apache as a different user; the .svn/auth directory is readable only
> by the owner, so all you have to do is make sure that the user Apache is
> running as is not the owner of the working copy files.

Ah! Yes, actually, I already have it set up like that, but that points
to the problem: simply that I'm opening .svn up when I shouldn't be
(when I chmod everything to make sure the documents I want accessible
are not inaccessible due to my umask). But I do a lot of chmod'ing
(home directory rsynced between home and work), so I'm not sure if I
trust myself to keep it set correctly.

Thom wrote:

> > <DirectoryMatch ~ "^\.svn">
> > Order deny,allow
> > Deny from all
> > </DirectoryMatch>
> >
> > should do pretty much what you need in a .htaccess.
> close. it's not allowed in .htaccess, and you can lose the '~'

Exactly; that would be the perfect solution, except it is not
allowed :-(

Rafael wrote:

> On the other hand, mod_rewrite can be used in .htaccess IIRC. (if the
> site-wide config allows it.)

Seen the quote on the apache site for it?

        ``The great thing about mod_rewrite is it gives you all the
        configurability and flexibility of Sendmail. The downside to mod_rewrite
        is that it gives you all the configurability and flexibility of
        Sendmail.''

        -- Brian Behlendorf
        Apache Group

:-))))

> Other way to do this (might or might not work, have you only
> static pages ?) : alias /~user/ to your svn repository,

Nah, all my index.html's are 'make'd.

Okay, thanks very much everyone, I'll go with Brane's httpd.conf
solution: it works, it's simple, whatever my umask'ing or chmod'ing
it'll still work. I'll put my 'alexis' hat on and kindly request
that the 'I' with the sysadmin hat on make the change.

Alexis

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Tue Jan 7 18:29:44 2003