[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Absolutely minimal file permissions for Subverison repository with Apache/DAV?

From: Ryan Schmidt <subversion-2008c_at_ryandesign.com>
Date: Sat, 9 Aug 2008 00:15:14 -0500

On Aug 8, 2008, at 12:10, Peter Michaux wrote:

> I've set up a Subversion repository with svnadmin 1.4.2 on Debian
> Etch. (That is the stable version of Subversion on Debian.) The
> repository is /home/dev/repo and that directory and all its contained
> files have owner:group www-data:www-data with rwxr-x-r-x permissions.
> Does everything in the repository need to have write access for
> www-data:www-data user:group that Apache runs as on Debian?
>
> I found some slightly different repository file permission settings
> here
>
> http://www.debian-administration.org/articles/374#comment_18
>
> In the permissions above, why do the directories need to have the
> leading "2" in their permissions?
>
> The permissions suggested in the above link are uniform for all files
> in the repository; however, when svnadmin creates the repository it
> seems to have various permission on various files.
>
> Does someone have a suggestion for a minimal set of file permissions
> and more restrictive ownership of the files in a repository so the
> www-data user can do the work it needs to do? For example to the hook
> template files need to be owned by www-data:www-data, etc?

I can't comment on instructions shown on that web site, but have you
checked out the official documentation on the topic of permissions?

http://subversion.tigris.org/faq.html#reposperms

I don't think the hook scripts need to be owned by anyone in
particular, so long as the user as whom the repository is served has
permission to execute them.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_subversion.tigris.org
For additional commands, e-mail: users-help_at_subversion.tigris.org
Received on 2008-08-09 07:16:34 CEST

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.