Re: Could svn check permissions?

Colin Watson wrote:
>
>
> When dropping privileges you generally need to do setgroups(), then
> setgid(), then setuid().
>

That's just the piece of information I needed, thanks! It works much better,
too, when I actually look up the gid of the group I passed in (copy/paste
error). :~0

> # ./svnadmin create --group svn --owner jpeacock /tmp/test
>
> # ll /tmp/test/
> total 10
> drwxrwx--- 2 jpeacock svn 1 Sep 8 22:19 dav/
> drwxrwx--- 2 jpeacock svn 1 Sep 8 22:19 db/
> -rw-rw---- 1 jpeacock svn 1 Sep 8 22:19 format
> drwxrwx--- 2 jpeacock svn 1 Sep 8 22:19 hooks/
> drwxrwx--- 2 jpeacock svn 1 Sep 8 22:19 locks/
> -rw-rw---- 1 jpeacock svn 1 Sep 8 22:19 README.txt

> # ./svnadmin create --owner jpeacock /tmp/test2
>
> # ll /tmp/test2/
> total 10
> drwx------ 2 jpeacock jpeacock 1 Sep 8 22:24 dav/
> drwx------ 2 jpeacock jpeacock 1 Sep 8 22:24 db/
> -rw------- 1 jpeacock jpeacock 1 Sep 8 22:24 format
> drwx------ 2 jpeacock jpeacock 1 Sep 8 22:24 hooks/
> drwx------ 2 jpeacock jpeacock 1 Sep 8 22:24 locks/
> -rw------- 1 jpeacock jpeacock 1 Sep 8 22:24 README.txt
>

Now that I have something basically working, I need to clean it up, write a test
(if I can figure out how to do that), write some docs, and a log message. Oh,
and test it on Win32...

John

-- 
John Peacock
Director of Information Research and Technology
Rowman & Littlefield Publishing Group
4720 Boston Way
Lanham, MD 20706
301-459-3366 x.5010
fax 301-429-5747
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org