Re: Setuid

2011-07-22 Thread Andy Canfield
On 07/22/2011 11:29 PM, David Chapman wrote: On 7/22/2011 8:38 AM, Andy Canfield wrote: Had what seems to be a bright idea. It is a bright idea for a Subversion server on Linux or OS X; AFAIK this idea has no relevance to Windows: Take note of the user and group that Apache runs as. Call th

Re: differencing only header files

2011-07-22 Thread Shlomi Fish
On Fri, 22 Jul 2011 15:01:09 -0500 Steve Cohen wrote: > Is there an easy way to restrict svn diff operation to files of a > certain extension (say .h)? A quick glance at the manual suggested > nothing to me. > A hacky way would be to use something like: $ ack -g '\.h$' | xargs -d '\n' svn

Re: differencing only header files

2011-07-22 Thread Nico Kadel-Garcia
On Fri, Jul 22, 2011 at 4:01 PM, Steve Cohen wrote: > Is there an easy way to restrict svn diff operation to files of a certain > extension (say .h)?  A quick glance at the manual suggested nothing to me. Nope: you'd have to parse the output of a "list" command or a local "find", which shouldn't

Re: 404 on SQLite dependency in get-deps.sh

2011-07-22 Thread Conor
Looks like the same issue, thanks for the response. I tried to search for this at http://subversion.apache.org/issue-tracker.html, but came up empty. -Conorr On Fri, Jul 22, 2011 at 2:10 PM, Daniel Shahaf wrote: > The following changes will be included in the next release: > > * r1134734 > F

Re: Need for a local Subversion server?

2011-07-22 Thread Andreas Krey
On Fri, 22 Jul 2011 13:01:06 +, Les Mikesell wrote: ... > I'm kind of curious about how git-svn would work out for this kind of use. I'd say that pretty much depends on your round-trip time. The initial 'git svn clone' can take seriously long; I did one for a repo that yields 328 commits in 45

differencing only header files

2011-07-22 Thread Steve Cohen
Is there an easy way to restrict svn diff operation to files of a certain extension (say .h)? A quick glance at the manual suggested nothing to me.

Re: 404 on SQLite dependency in get-deps.sh

2011-07-22 Thread Daniel Shahaf
The following changes will be included in the next release: * r1134734 Fix sqlite-amalgamation location and archive format. Branch: 1.6.x-r1134734 Justification: Users report get-deps.sh of sqlite is currently broken. Notes: r1134734 also bumped dependency versions; the

Re: Need for a local Subversion server?

2011-07-22 Thread Les Mikesell
On 7/22/2011 12:12 PM, Phil Montgomery wrote: I have a question regarding the need of a subversion mirror server. Our work is done on UNIX systems. We currently have a master repository in England. We mirror it as a read only repository to the states. The system that acts as the Subversion se

Re: Need for a local Subversion server?

2011-07-22 Thread Stefan Sperling
On Fri, Jul 22, 2011 at 10:12:31AM -0700, Phil Montgomery wrote: > I have a question regarding the need of a subversion mirror server. > > Our work is done on UNIX systems. We currently have a master repository in > England. We mirror it as a read only repository to the states. The system > tha

Need for a local Subversion server?

2011-07-22 Thread Phil Montgomery
I have a question regarding the need of a subversion mirror server. Our work is done on UNIX systems. We currently have a master repository in England. We mirror it as a read only repository to the states. The system that acts as the Subversion server in the states is rather old and its faster

404 on SQLite dependency in get-deps.sh

2011-07-22 Thread Conor
Problem: The URL used by get-deps.sh from subversion-1.6.17.tar.gz to get SQLite, http://www.sqlite.org/sqlite-amalgamation-3.7.5.tar.gz, is 404. Proposed Solution: It looks like sqlite.org has changed (?) their filename format, as the latest version of the amalgamation file is 3.7.7.1, and the

Re: Setuid

2011-07-22 Thread Nico Kadel-Garcia
On Fri, Jul 22, 2011 at 11:38 AM, Andy Canfield wrote: > Had what seems to be a bright idea. It is a bright idea for a Subversion > server on Linux or OS X; AFAIK this idea has no relevance to Windows: > > Take note of the user and group that Apache runs as. Call this combination > APACHE, meaning

Re: Setuid

2011-07-22 Thread Les Mikesell
On 7/22/2011 10:38 AM, Andy Canfield wrote: If I set the svnserve program to be owned by APACHE, and setuid and setgid, then whatever svnserve does to any repository will also be done by APACHE. Only root, or the APACHE user, can make this change to the svnserve program binary. You don't need

Re: Can I prevent a file from being modified?

2011-07-22 Thread Les Mikesell
On 7/22/2011 11:36 AM, David Weintraub wrote: This allows you to add in directories directly under the "tags" directory via an "svn cp", but you can't add anything under those directories. I don't make a distinction between files, and directories. It is possible to use "svn add" to add in empty

Re: Can I prevent a file from being modified?

2011-07-22 Thread David Weintraub
On Thu, Jul 21, 2011 at 12:47 PM, Andreas Krey wrote: > On Thu, 21 Jul 2011 11:06:00 +, David Weintraub wrote: >> I have a pre-commit hook that allows you to set a directory as >> "add-only". This was mainly for the tags directory. You can create a >> tag, but once created, it can't be modifie

Re: Setuid

2011-07-22 Thread David Chapman
On 7/22/2011 8:38 AM, Andy Canfield wrote: Had what seems to be a bright idea. It is a bright idea for a Subversion server on Linux or OS X; AFAIK this idea has no relevance to Windows: Take note of the user and group that Apache runs as. Call this combination APACHE, meaning APACHE_USER and

Re: Subversion: existing users

2011-07-22 Thread Les Mikesell
On 7/22/2011 1:45 AM, Andy Canfield wrote: > >> Welcome to sys-admin hell, the "documentation is true, but not >> complete" world that I've spent so many years in. The connections >> between different pieces of information that are obvious to someone >> who's been through similar issues in the pas

Setuid

2011-07-22 Thread Andy Canfield
Had what seems to be a bright idea. It is a bright idea for a Subversion server on Linux or OS X; AFAIK this idea has no relevance to Windows: Take note of the user and group that Apache runs as. Call this combination APACHE, meaning APACHE_USER and APACHE_GROUP. Whatever mod_dav_svn does to

Re: Subversion access control

2011-07-22 Thread Geoff Hoffman
On Thu, Jul 21, 2011 at 11:19 PM, Andy Canfield wrote: > I notice that you don't have any entries that read "... = r"; everyone who > can read can write also. No need? > Yeah, I just don't have a use case for that. The RSS feed of a repo commits from websvn is much more useful than read-only acc

Limited Access Repository

2011-07-22 Thread Andy Canfield
I changed my repository parent so that it is not readable, not writable, not searchable by anyone except the owner, which is www-data (the user that Apache runs as) - *drwx-- 2 www-data www-data 4096 2011-07-22 15:45 /data/svn* I figure that will keep other users away from the contents.