RE: Apache Browsing Error fixed

Brian,
 
Makes sense. In my rage over this thing not working, I ignored the fact that
it was running as 'Apache2' user. Or the whole
Unix101-subdirectory-permissions-rule.
 
Again, thanks for the help.
 
-Sean
 
  _____

From: Brian Mathis [mailto:bmathis@directedge.com]
Sent: Friday, March 05, 2004 12:38 PM
To: Gayle, Sean
Cc: users@subversion.tigris.org
Subject: Re: Apache Browsing Error fixed
 
It's standard UNIX permissions. If you can't read what's inside a
directory, you can't access it. If you have a private dir, everything in
that dir is private. You can actually get away with using a+x (no +r) on
your home dir. That prevents other users from doing an 'ls' in your
homedir, but they can still get to files/dirs below your home dir that have
a+r, but only if they know the exact path to them.

Your apache is not running as root, it is running as user "apache2", so it
is just like any other user and needs access to the files. It doesn't
matter who the httpd2 file is owned by, unless the suid bit is set for it.

Gayle, Sean wrote:

Brian,
 
Hmmph. That worked perfectly.
Could you explain to me why the entire home dir needs to be a+rx as opposed
to just the subversion repos directory (in my case 'svn') ?
 
In any case thanks to you, Brian F. and Ben for helping me out...

Regards,
Sean
 
  _____

From: Brian Mathis [mailto:bmathis@directedge.com
<mailto:bmathis@directedge.com> ]
Sent: Friday, March 05, 2004 12:03 PM
To: Gayle, Sean
Cc: users@subversion.tigris.org <mailto:users@subversion.tigris.org>
Subject: Re: Apache Browsing Error
 
Your home directory needs to be a+rx for anything below it to be visible.
> cd ~
> chmod a+rx ./

It does not need +w

Gayle, Sean wrote:

Sure. Here is the result:
[root@redboss kidstar]# cd /home/kidstar/svn/newrepos/
[root@redboss newrepos]# ls -lR
.:
total 28
drwxrwxrwx 2 kidstar kidstar 4096 Mar 3 15:29 conf
drwxrwxrwx 2 kidstar kidstar 4096 Mar 3 15:29 dav
drwxrwxrwx 2 kidstar kidstar 4096 Mar 3 15:29 db
-rwxrwxrwx 1 kidstar kidstar 2 Mar 3 15:29 format
drwxrwxrwx 2 kidstar kidstar 4096 Mar 3 15:29 hooks
drwxrwxrwx 2 kidstar kidstar 4096 Mar 3 15:29 locks
-rwxrwxrwx 1 kidstar kidstar 376 Mar 3 15:29 README.txt
./conf:
total 4
-rwxrwxrwx 1 kidstar kidstar 1101 Mar 3 15:29 svnserve.conf
./dav:
total 0
./db:
total 780
-rwxrwxrwx 1 kidstar kidstar 8192 Mar 3 15:32 changes
-rwxrwxrwx 1 kidstar kidstar 8192 Mar 3 15:32 copies
-rwxrwxrwx 1 kidstar kidstar 8192 Mar 3 15:29 __db.001
-rwxrwxrwx 1 kidstar kidstar 270336 Mar 3 15:29 __db.002
-rwxrwxrwx 1 kidstar kidstar 327680 Mar 3 15:29 __db.003
-rwxrwxrwx 1 kidstar kidstar 712704 Mar 3 15:29 __db.004
-rwxrwxrwx 1 kidstar kidstar 16384 Mar 3 15:29 __db.005
-rwxrwxrwx 1 kidstar kidstar 1740 Mar 3 15:29 DB_CONFIG
-rwxrwxrwx 1 kidstar kidstar 90773 Mar 3 15:32 log.0000000001
-rwxrwxrwx 1 kidstar kidstar 8192 Mar 3 15:32 nodes
-rwxrwxrwx 1 kidstar kidstar 8192 Mar 3 15:32 representations
-rwxrwxrwx 1 kidstar kidstar 8192 Mar 3 15:32 revisions
-rwxrwxrwx 1 kidstar kidstar 8192 Mar 3 15:32 strings
-rwxrwxrwx 1 kidstar kidstar 8192 Mar 3 15:32 transactions
-rwxrwxrwx 1 kidstar kidstar 8192 Mar 3 15:32 uuids
./hooks:
total 20
-rwxrwxrwx 1 kidstar kidstar 1286 Mar 3 15:29 post-commit.tmpl
-rwxrwxrwx 1 kidstar kidstar 1475 Mar 3 15:29
post-revprop-change.tmpl
-rwxrwxrwx 1 kidstar kidstar 2093 Mar 3 15:29 pre-commit.tmpl
-rwxrwxrwx 1 kidstar kidstar 1952 Mar 3 15:29
pre-revprop-change.tmpl
-rwxrwxrwx 1 kidstar kidstar 1377 Mar 3 15:29 start-commit.tmpl
./locks:
total 8
-rwxrwxrwx 1 kidstar kidstar 460 Mar 3 15:29 db.lock
-rwxrwxrwx 1 kidstar kidstar 295 Mar 3 15:29 db-logs.lock
- Sean
 

-- 
Brian Mathis
http://directedge.com/b/ <http://directedge.com/b/> 
-- 
Brian Mathis
http://directedge.com/b/ <http://directedge.com/b/>