[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Apache Browsing Error fixed

From: Brian Mathis <bmathis_at_directedge.com>
Date: 2004-03-05 18:38:02 CET

It's standard UNIX permissions. If you can't read what's inside a
directory, you can't access it. If you have a private dir, everything
in that dir is private. You can actually get away with using a+x (no
+r) on your home dir. That prevents other users from doing an 'ls' in
your homedir, but they can still get to files/dirs below your home dir
that have a+r, but only if they know the exact path to them.

Your apache is not running as root, it is running as user "apache2", so
it is just like any other user and needs access to the files. It
doesn't matter who the httpd2 file is owned by, unless the suid bit is
set for it.

Gayle, Sean wrote:

> Brian,
>
>
>
> Hmmph. That worked perfectly.
>
> Could you explain to me why the entire home dir needs to be a+rx as
> opposed to just the subversion repos directory (in my case 'svn') ?
>
>
>
> In any case thanks to you, Brian F. and Ben for helping me out...
>
>
> Regards,
>
> Sean
>
>
>
> ------------------------------------------------------------------------
>
> *From:* Brian Mathis [mailto:bmathis@directedge.com]
> *Sent:* Friday, March 05, 2004 12:03 PM
> *To:* Gayle, Sean
> *Cc:* users@subversion.tigris.org
> *Subject:* Re: Apache Browsing Error
>
>
>
> Your home directory needs to be a+rx for anything below it to be visible.
>> cd ~
>> chmod a+rx ./
>
> It does not need +w
>
>
>
> Gayle, Sean wrote:
>
> Sure. Here is the result:
>
> [root@redboss kidstar]# cd /home/kidstar/svn/newrepos/
>
> [root@redboss newrepos]# ls -lR
>
> .:
>
> total 28
>
> drwxrwxrwx 2 kidstar kidstar 4096 Mar 3 15:29 conf
>
> drwxrwxrwx 2 kidstar kidstar 4096 Mar 3 15:29 dav
>
> drwxrwxrwx 2 kidstar kidstar 4096 Mar 3 15:29 db
>
> -rwxrwxrwx 1 kidstar kidstar 2 Mar 3 15:29 format
>
> drwxrwxrwx 2 kidstar kidstar 4096 Mar 3 15:29 hooks
>
> drwxrwxrwx 2 kidstar kidstar 4096 Mar 3 15:29 locks
>
> -rwxrwxrwx 1 kidstar kidstar 376 Mar 3 15:29 README.txt
>
> ./conf:
>
> total 4
>
> -rwxrwxrwx 1 kidstar kidstar 1101 Mar 3 15:29 svnserve.conf
>
> ./dav:
>
> total 0
>
> ./db:
>
> total 780
>
> -rwxrwxrwx 1 kidstar kidstar 8192 Mar 3 15:32 changes
>
> -rwxrwxrwx 1 kidstar kidstar 8192 Mar 3 15:32 copies
>
> -rwxrwxrwx 1 kidstar kidstar 8192 Mar 3 15:29 __db.001
>
> -rwxrwxrwx 1 kidstar kidstar 270336 Mar 3 15:29 __db.002
>
> -rwxrwxrwx 1 kidstar kidstar 327680 Mar 3 15:29 __db.003
>
> -rwxrwxrwx 1 kidstar kidstar 712704 Mar 3 15:29 __db.004
>
> -rwxrwxrwx 1 kidstar kidstar 16384 Mar 3 15:29 __db.005
>
> -rwxrwxrwx 1 kidstar kidstar 1740 Mar 3 15:29 DB_CONFIG
>
> -rwxrwxrwx 1 kidstar kidstar 90773 Mar 3 15:32 log.0000000001
>
> -rwxrwxrwx 1 kidstar kidstar 8192 Mar 3 15:32 nodes
>
> -rwxrwxrwx 1 kidstar kidstar 8192 Mar 3 15:32 representations
>
> -rwxrwxrwx 1 kidstar kidstar 8192 Mar 3 15:32 revisions
>
> -rwxrwxrwx 1 kidstar kidstar 8192 Mar 3 15:32 strings
>
> -rwxrwxrwx 1 kidstar kidstar 8192 Mar 3 15:32 transactions
>
> -rwxrwxrwx 1 kidstar kidstar 8192 Mar 3 15:32 uuids
>
> ./hooks:
>
> total 20
>
> -rwxrwxrwx 1 kidstar kidstar 1286 Mar 3 15:29 post-commit.tmpl
>
> -rwxrwxrwx 1 kidstar kidstar 1475 Mar 3 15:29
> post-revprop-change.tmpl
>
> -rwxrwxrwx 1 kidstar kidstar 2093 Mar 3 15:29 pre-commit.tmpl
>
> -rwxrwxrwx 1 kidstar kidstar 1952 Mar 3 15:29
> pre-revprop-change.tmpl
>
> -rwxrwxrwx 1 kidstar kidstar 1377 Mar 3 15:29 start-commit.tmpl
>
> ./locks:
>
> total 8
>
> -rwxrwxrwx 1 kidstar kidstar 460 Mar 3 15:29 db.lock
>
> -rwxrwxrwx 1 kidstar kidstar 295 Mar 3 15:29 db-logs.lock
>
> - Sean
>
>
>
>
>
>--
>
>Brian Mathis
>
>http://directedge.com/b/
>

-- 
Brian Mathis
http://directedge.com/b/
Received on Fri Mar 5 18:38:35 2004

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.