Re: .subversion default rights

On 2005.03.02 08:01:36 +0000, Ben Collins-Sussman wrote:
>
> On Mar 2, 2005, at 7:45 AM, Manuel VACELET wrote:
> >
> >Default .subversion directory created by first svn call is bad
> >protected (probaly using default umask) instead of setting 'chmod
> >0600'. This directory that can contains sensible datas (passwords in
> >servers file) so it have to be well protected by default.
> >
>
> Look again: ~/.subversion/auth/ is chmod 0700. That's where the
> sensitive data lies.

~/.subversion/servers has http-proxy-password and
ssl-client-cert-password fields.

-- 
David Ripton    dripton@ripton.net
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org