svnserve, bind to port <1024

[Martin Luessi <ml...@hsr.ch>]

Hi

To be able to come thru a firewall I'm forced to run svnserve on a privileged 
port (<1024). Since svnserve is not able to change it's UID after the socket
has bound to a port and I don't want to run it as root, I had to change the
source (just add setuid(UID), setgid(GID) to subversion/svnserve/main.c)

I really think this feature should be a standard in svnserve, are there any 
plans to implement this?

thanks for this great piece of software

Martin   

PS: please add me as CC when you answer, I have not jet subscribed to this 
list

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org

Re: svnserve, bind to port <1024

[Max Bowsher <ma...@ukf.net>]

Martin Luessi wrote:
> Hi
>
> To be able to come thru a firewall I'm forced to run svnserve on a 
> privileged
> port (<1024). Since svnserve is not able to change it's UID after the 
> socket
> has bound to a port and I don't want to run it as root, I had to change 
> the
> source (just add setuid(UID), setgid(GID) to subversion/svnserve/main.c)
>
> I really think this feature should be a standard in svnserve, are there 
> any
> plans to implement this?
>
> thanks for this great piece of software
>
> Martin
>
> PS: please add me as CC when you answer, I have not jet subscribed to this
> list

I'm not aware of any current plans, but perhaps you would like to send 
another email here with a subject like "Proposal: add --user and --group 
options to svnserve, to enable dropping privileges when run as root", to see 
if anyone has any objections. If none, then if you could submit a patch to 
add these options, we will commit it.

Max.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org