[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: .subversion default rights

From: Manuel VACELET <manuel.vacelet-abecedaire_at_st.com>
Date: 2005-03-02 16:27:20 CET

Ben Collins-Sussman wrote:
>
> On Mar 2, 2005, at 8:30 AM, Manuel VACELET wrote:
>
>> Ben Collins-Sussman wrote:
>>
>>> On Mar 2, 2005, at 7:45 AM, Manuel VACELET wrote:
>>>
>>>>
>>>> Default .subversion directory created by first svn call is bad
>>>> protected (probaly using default umask) instead of setting 'chmod
>>>> 0600'. This directory that can contains sensible datas (passwords in
>>>> servers file) so it have to be well protected by default.
>>>>
>>> Look again: ~/.subversion/auth/ is chmod 0700. That's where the
>>> sensitive data lies.
>>
>>
>> Yes but ~/.subversion/servers file can contains sensitive data too
>> (E.g. proxy password).
>>
>
> Aha... you're right. Can you repost this to dev@subversion.tigris.org
> ? Maybe we can file an issue on this, or just make a quick code-fix.

Ok, done.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Mar 2 16:29:58 2005

This is an archived mail posted to the Subversion Users mailing list.