Absolutely minimal file permissions for Subverison repository with Apache/DAV?

Hi,

I've set up a Subversion repository with svnadmin 1.4.2 on Debian
Etch. (That is the stable version of Subversion on Debian.) The
repository is /home/dev/repo and that directory and all its contained
files have owner:group www-data:www-data with rwxr-x-r-x permissions.
Does everything in the repository need to have write access for
www-data:www-data user:group that Apache runs as on Debian?

I found some slightly different repository file permission settings here

http://www.debian-administration.org/articles/374#comment_18

In the permissions above, why do the directories need to have the
leading "2" in their permissions?

The permissions suggested in the above link are uniform for all files
in the repository; however, when svnadmin creates the repository it
seems to have various permission on various files.

Does someone have a suggestion for a minimal set of file permissions
and more restrictive ownership of the files in a repository so the
www-data user can do the work it needs to do? For example to the hook
template files need to be owned by www-data:www-data, etc?

Thank you,
Peter

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_subversion.tigris.org
For additional commands, e-mail: users-help_at_subversion.tigris.org
Received on 2008-08-08 19:10:44 CEST