[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: SVN folder permissions in linux

From: David Weintraub <qazwart_at_gmail.com>
Date: Wed, 21 Jan 2009 12:09:23 -0500

It depends upon whether you use ssh+svn protocol or not.

All files under the repository directory need read and write
permission for the user who is running the server process. For
http://, this would be the Apache user which can be apache, www-run,
or www-data depending upon the Apache installation. I believe most
Linux distros run Apache as user "apache" as the default, but SUSE
runs it as "wwwrun". Directories, of course, need read/write/execute
permission for the server user.

Beyond that, giving groups and others "read only" access is up to you.
Normally, groups and others are given "read only" access, but I can
imagine some situations where you don't want users to be able to view
the Subversion repository or copy it out.

If you are running , ssh+svn, you need to make sure that the group
access is also read/write for files and directories. Again, you can do
this via the umask setting for the user running the svnserve process.

Typical for svnserve and httpd:
    Files: rw-r--r--
    Directories: rwx-r-xr-x
    Owner is the user running the httpd or svnserve process

For ssh+svn:
    Files: rw-rw-r--
    Directories: rwxrwxr-x
    Owner is the user running the svnserve process. Group must be
    the development group that works on these files.

On Wed, Jan 21, 2009 at 8:40 AM, Oliver Marshall
<oliver.marshall_at_g2support.com> wrote:
> Hi chaps,
>
>
>
> What's the official stance on what the permissions should be for the svn
> repos folder on an SVN server running linux? Apache runs as www-data, so I'm
> guessing that our SVN parentpath (/svn here) has to be owned by www-data
> with r+w for just that user and +r for any other user.
>
>
>
> Is that right, or are their specific exceptions for certain folders within
> each of the SVN repo structures ?
>
>
>
> Olly
>
>
>
> --
>
> Important notice:
>
> We have moved offices. Our new address is below.
>
>
>
> G2 Support
>
> Network Support : Online Backups : Server Management
>
>
>
> Tel: 0870 904 3443
>
> Email: oliver.marshall_at_g2support.com
>
> Web: http://www.g2support.com
>
> Mail: 2nd Floor, 130a Western Rd, Brighton, Sussex, BN12LA
>
>
>
> G2 Support LLP is registered at Mill House, 103 Holmes Avenue, HOVE
>
> BN3 7LE. Our registered company number is OC316341.
>
>
>
>
>
>

-- 
--
David Weintraub
qazwart_at_gmail.com
------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=1041608
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subversion.tigris.org].
Received on 2009-01-21 18:10:14 CET

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.