[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: commit with owner and group of my repository as unix user

From: Ryan Schmidt <subversion-2007b_at_ryandesign.com>
Date: 2007-05-23 11:42:37 CEST

On May 23, 2007, at 04:35, Sonal Uphale wrote:

>> My impression is that it should have worked if you had everything set
>> to 777. The fact that it didn't work suggests that maybe some part of
>> the repository wasn't 777.
> I checked the permissions, and they are 777 alright.
>
>> The correct way to set up a repository with Apache is to have it
>> owned by the user under which Apache runs, and to set the permissions
>> so that only that user can read/write (700 permissions on
>> directories, 600 on files).
> Ryan: I still did not get this, can you please explain it further.

Let's say that your repository is "/var/svn" (you've previously done
"svnadmin create /var/svn") and your Apache server runs as the user
"www" in the group "www". Then I think the best way to set it up is
probably:

chown -R www:www /var/svn
chmod -R 700 /var/svn
find /var/svn -type f -print0 | xargs -0 chmod 600

Now everything is owned by the user under which Apache runs,
directories have 700 (a.k.a. "rwx") permission, and files have 600
(a.k.a. "rw-") permission. This ensures that the only way to access
the repository is through Apache, so that you don't have to worry
about anybody being able to get access to data in the repository by
copying the revision files off the server directly.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed May 23 11:43:15 2007

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.