On Oct 20, 2004, at 2:01 PM, Ed Swierk wrote:
> On Wed, 20 Oct 2004, Tobias Ringström wrote:
>
>> The slowness of svn log is an unfortunate side-effect of the fix for
>> the
>> leakage of unauthorized data in 1.0.8. If you're not using
>> mod_authz_svn, your can either downgrade to 1.0.7, or upgrade to 1.1.1
>> when it's released and use "SVNPathAuthz Off".
>
> I am using mod_authz_svn--is there any workaround in this case?
There's no known workaround. For every revision returned by 'svn log',
the server now needs to inspect the changed-paths in the revision and
decide how many are readable. Based on the answer to that question,
the server then decides how much information to send about the
revision: whether or not it's okay to send any of {date, author,
log-message} and how many of the changed-paths can be revealed. That's
what the security fix is all about.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Oct 20 21:49:26 2004