Re: SVN Server 1.6.1 access via http

Hi Campbell

> I have run the strace by using:
> strace -ffFv -o strace.txt env -i LANG=C PATH=/usr/bin:/usr/sbin:/
> usr/local/bin:/bin LD_LIBRARY_PATH=/usr/lib/libgdbm.so.2 /usr/sbin/
> apachectl start &
>
> I am attaching strace.txt.1041 which shows when I am trying to hit http://servername/General/Test3
> (one of my repository), it gets Permission Denied on /repos/General/
> Test3/db/rep-cache.db while if I do
> ls -l /repos/General/Test3/db/ following is the output

...

>
> Any ideas?

You are running on RHEL? Maybe your SeLinux policy denies apache to
(write) access to the files. Try the follwing commands:

getenforce

If it tells you, that SeLinux is "Enforcing", then SeLinux might needs
some additional configuration.

Try

  audit2allow -a

and post the result. If you want to give a shot in the dark a chance,
then do an "ls -Z" on /repos/General/Test3. If the type of your
directories/files is not "httpd_sys_content_t ", then change that by
calling

semanage fcontext -a -t httpd_sys_content_t '/repos(/[^/]*)*'
restorecon -R -v /repos

This will allow apache to access all files and directories under /
repos. Remember that telling SeLinux MAC to allow the access is not
enough. Apache still needs the "normal" (DAC) permissions to do so.
But with your 777s that seems to be the case :-)

Jens

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=1951750

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subversion.tigris.org].
Received on 2009-04-27 22:43:12 CEST