[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: access svn securely from the internet via sasl or ssh

From: Paul Koning <Paul_Koning_at_dell.com>
Date: Fri, 19 Dec 2008 13:08:12 -0500

>>>>> "Bob" == Bob Archer <Bob.Archer_at_amsi.com> writes:

 Bob> Understood... but I am going by what the OP email said. And I
 Bob> may misunderstand what he means. But... from what I gather...

 Bob> He wants the user to have rw access to the repository via the
 Bob> svn client but does NOT want him to have rw file system access
 Bob> to the repository folder.

Oops, I missed that.

That requires setting up the server end so svnserve can run through an
SSH tunne, but regular interactive access is denied. That's easy.
Assign the users to a "shell" which is a script that refuses to let in
anything other than svnserve. Something like this:

 # cat /usr/local/bin/svnonly.sh
#!/bin/bash
if [ "$*" = "-c svnserve -t" ]; then
    svnserve -t
    exit $?
fi
while true; do
    date; sleep 600;
done;

        paul

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=987685

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subversion.tigris.org].
Received on 2008-12-19 19:09:52 CET

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.