[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: commit-email.pl and elevated gid

From: Bob Proulx <bob_at_proulx.com>
Date: 2005-04-09 20:27:29 CEST

Ted Dustman wrote:
> Me again. Got no response from my previous message below. Thought I
> would try again. If my email seems utterly without merit then call me
> nuts---it won't be the first time :-)

I think the reason you got no response is that your problem seems
specific to using xinetd or perhaps xinetd on Mac OS X. It does not
sound related to subversion at all. You might try asking on a Mac
list. (shrug)

Me, I would debug this with scripts called from xinetd. Avoid
subversion and just work directly with xinetd. Put debug statements
into place and really debug what is going on. If you can't figure out
how to make xinetd work for you then create a suid-sgid wrapper
program. Have that program set the real ids and then call your
script. That should work around the problem you are seeing if you
can't figure out how to solve it more directly. But it is still a
kludge on a hack.

Bob

> On Mar 24, 2005, at 3:49 PM, Ted Dustman wrote:
>
> >Hi,
> >
> >I'm running svnserve 1.1 under control of xinetd on mac os x 10.3.8.
> >Xinetd is configured to run svnserve as a non-root user (uid 1029 and
> >gid 80). However, I've found that commit-email.pl is running with an
> >effective gid of 0. This causes commit-email.pl to abort when setting
> >up the pipe to sendmail because perl's tainting mechanism doesn't like
> >the elevated group privileges. Why is commit-email.pl running with
> >egid set to 0? If I configure xinetd to run svnserve with group 0
> >then all is well. What am I doing wrong?
> >
> >Thanks,
> >
> >T.
> >
> >-------------------------------------------------------------------
> >
> >Ted Dustman
> >University of Utah
> >Nora Eccles Harrison Cardiovascular Research and Training Institute
> >Room 104
> >95 South 2000 East
> >Salt Lake City, UT 84112-5000
> >
> >e-mail: dustman@cvrti.utah.edu
> >Phone: (801) 587-9513
> >Fax: (801) 581-3128

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Sat Apr 9 20:31:18 2005

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.