[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Hook script rights and wrongs...

From: David Weintraub <qazwart_at_gmail.com>
Date: 2005-08-24 22:00:19 CEST

What user is running Apache's httpd daemon? That should be the user
who owns the hook scripts (and the entire repository). You don't need
execute permission for anyone but the owner. However, I there isn't
any security problems with 755 permission. The hook script merely runs
a few svnlook commands, and either exits with a status of zero or
non-zero. The hook scripts shouldn't be changing anything in
Subversion archive itself.

On 8/24/05, John O'Grady <astrien@facets-tech.net> wrote:
> Just a note here...
>
> I was trying to set a revprop. I typed and got the following:
>
> Z:\@Projects\@Comcast\@TransSVN\jpx\trunk>svn propset "transsvn:bad.prop"
> --revprop -r HEAD "My Property"
> https://ccpdev2.comcastonline.com/repos/transsvn_testing_REPOS/trunk/
> svn: DAV request failed; it's possible that the repository's
> pre-revprop-change hook either failed or is non-existent
> svn: At least one property change failed; repository is unchanged
>
>
> I had tried with HEAD, and with the number of the latest revision. No joy.
>
> Server version: 1.2.0, Solaris
> Client version: 1.2.1, WinXP
>
> I finally gave the docs a good once over, and copied the
> pre-revprop-change.tmpl to pre-revprop-change, and chmoded 774. Still no
> joy. Then I chomoded 775, and all was well.... except the fact that
> security-wise, "other" now has the execute bit. Is there a reason that
> hookscripts need to be executable by anyone to run properly? The ls -la is:
>
> -rwxrwxr-x 1 jogrady apache 2.0K Aug 24 10:21 pre-revprop-change*
>
> ...and I would figure that the svn process would be run by the web-dav
> process, which is kicked by Apache, which has full rights to the script
> already. I know SVN runs the scripts sans env, but is it running them as
> another user?
>
> As always, keep up the good work. We're loving it here...
>
> - John O'Grady
> Senior Software Architect
> Comcast Online
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
> For additional commands, e-mail: users-help@subversion.tigris.org
>
>

-- 
--
David Weintraub
qazwart@gmail.com
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Aug 24 22:02:26 2005

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.