Re: .svn/wc.db as group writable

On Fri, Feb 24, 2017 at 10:34 AM, Johan Corveleyn <jcorvel_at_gmail.com> wrote:

>> You're definitely gont to want to set the directory permissions to
>> "2775", in order to ensure that files created inside the subdirectory
>> inherit the correct group permissions. Perhaps a "find . ! -group
>> devgrp" might show such files, if they already exist?
>
> Thanks for the suggestion ... maybe I'll look into it.
>
> But for now this doesn't pose a problem for us, because we always set
> umask to 002 when devs login to this build machine, so any files they
> create beneath those directories, or anywhere else when they do
> "build-work", will be fine.

The difficulties include if a new subdirectory is created. That new
subdirectory will have group ownership by the developer, and
permissions of 0775. Hilarity can ensue. And the difficulty is true of
both Subversion repositories, and shared Subversion working copies.

> (there have been some rare occurrences when a dev changed their umask,
> and then this falls over ... but we deal with those ad hoc for the
> moment)

Perhaps a regular cron job could run, with alerts posting which files
or directories have erroneous permissions?
Received on 2017-02-26 02:21:34 CET