Re: .subversion default rights

On Mar 2, 2005, at 8:30 AM, Manuel VACELET wrote:

> Ben Collins-Sussman wrote:
>> On Mar 2, 2005, at 7:45 AM, Manuel VACELET wrote:
>>>
>>> Default .subversion directory created by first svn call is bad
>>> protected (probaly using default umask) instead of setting 'chmod
>>> 0600'. This directory that can contains sensible datas (passwords in
>>> servers file) so it have to be well protected by default.
>>>
>> Look again: ~/.subversion/auth/ is chmod 0700. That's where the
>> sensitive data lies.
>
> Yes but ~/.subversion/servers file can contains sensitive data too
> (E.g. proxy password).
>

Aha... you're right. Can you repost this to dev@subversion.tigris.org
? Maybe we can file an issue on this, or just make a quick code-fix.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Mar 2 15:45:24 2005