Ben Collins-Sussman wrote:
>
> On Mar 2, 2005, at 8:30 AM, Manuel VACELET wrote:
>
>> Ben Collins-Sussman wrote:
>>
>>> On Mar 2, 2005, at 7:45 AM, Manuel VACELET wrote:
>>>
>>>>
>>>> Default .subversion directory created by first svn call is bad
>>>> protected (probaly using default umask) instead of setting 'chmod
>>>> 0600'. This directory that can contains sensible datas (passwords in
>>>> servers file) so it have to be well protected by default.
>>>>
>>> Look again: ~/.subversion/auth/ is chmod 0700. That's where the
>>> sensitive data lies.
>>
>>
>> Yes but ~/.subversion/servers file can contains sensitive data too
>> (E.g. proxy password).
>>
>
> Aha... you're right. Can you repost this to dev@subversion.tigris.org
> ? Maybe we can file an issue on this, or just make a quick code-fix.
Ok, done.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Mar 2 16:29:58 2005