[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: Re: SVN Server 1.6.1 access via http

From: <webpost_at_tigris.org>
Date: Mon, 27 Apr 2009 17:15:42 -0700 (PDT)

I could not get other commands working but changing SELinux from enforcing to permissive did the work and able to browse within repositories.

Bundle of thanks,
Bilal

> Hi Campbell
>
> > I have run the strace by using:
> > strace -ffFv -o strace.txt env -i LANG=C PATH=/usr/bin:/usr/sbin:/
> > usr/local/bin:/bin LD_LIBRARY_PATH=/usr/lib/libgdbm.so.2 /usr/sbin/
> > apachectl start &
> >
> > I am attaching strace.txt.1041 which shows when I am trying to hit http://servername/General/Test3
> > (one of my repository), it gets Permission Denied on /repos/General/
> > Test3/db/rep-cache.db while if I do
> > ls -l /repos/General/Test3/db/ following is the output
>
> ...
>
> >
> > Any ideas?
>
> You are running on RHEL? Maybe your SeLinux policy denies apache to
> (write) access to the files. Try the follwing commands:
>
> getenforce
>
>
> If it tells you, that SeLinux is "Enforcing", then SeLinux might needs
> some additional configuration.
>
> Try
>
> audit2allow -a
>
> and post the result. If you want to give a shot in the dark a chance,
> then do an "ls -Z" on /repos/General/Test3. If the type of your
> directories/files is not "httpd_sys_content_t ", then change that by
> calling
>
> semanage fcontext -a -t httpd_sys_content_t '/repos(/[^/]*)*'
> restorecon -R -v /repos
>
> This will allow apache to access all files and directories under /
> repos. Remember that telling SeLinux MAC to allow the access is not
> enough. Apache still needs the "normal" (DAC) permissions to do so.
> But with your 777s that seems to be the case :-)
>
> Jens

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=1954664

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subversion.tigris.org].
Received on 2009-04-28 02:17:41 CEST

This is an archived mail posted to the Subversion Users mailing list.