You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@subversion.apache.org by Adrian Robert <ar...@cogsci.ucsd.edu> on 2004/02/23 16:58:12 UTC
svnserve+ssh
> But I don't know how to restrict it to a required directory.
> My repo lies in /home/svn, so my URI looks like this:
> svn co svn+ssh://repo.vernet.pl/home/svn/bip/trunk
>
> How can I restrict (like running svnserve -r) svn through ssh?
Has anyone found a way to do this? It is not only a pain to have to do:
svn+ssh://machine.foo.com/a/path/to/somewhere/
instead of:
svn://machine.foo.com/
but it can be construed as a security risk to be exposing absolute
paths like this.
Either a global config (/etc/svnserve.conf) or configs in every user's
.subversion directory would be needed.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: svnserve+ssh
Posted by "Perry E. Metzger" <pe...@piermont.com>.
Adrian Robert <ar...@cogsci.ucsd.edu> writes:
> OK, wrapping svnserve with somthing like the following works:
>
> ----------
> #!/bin/sh
> # wrap in order to put root in by default
>
> exec /usr/local/bin/svnserve.bin -r /path/to/repository/root "$@"
> ----------
Hmm. Maybe I should add a feature to do this to my really minimal
setgid wrapper for svnserve...
Perry
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Re: svnserve+ssh
Posted by Adrian Robert <ar...@cogsci.ucsd.edu>.
OK, wrapping svnserve with somthing like the following works:
----------
#!/bin/sh
# wrap in order to put root in by default
exec /usr/local/bin/svnserve.bin -r /path/to/repository/root "$@"
----------
On Feb 23, 2004, at 11:58 AM, Adrian Robert wrote:
>> But I don't know how to restrict it to a required directory.
>> My repo lies in /home/svn, so my URI looks like this:
>> svn co svn+ssh://repo.vernet.pl/home/svn/bip/trunk
>>
>> How can I restrict (like running svnserve -r) svn through ssh?
>
> Has anyone found a way to do this? It is not only a pain to have to
> do:
>
> svn+ssh://machine.foo.com/a/path/to/somewhere/
>
> instead of:
>
> svn://machine.foo.com/
>
> but it can be construed as a security risk to be exposing absolute
> paths like this.
>
> Either a global config (/etc/svnserve.conf) or configs in every user's
> .subversion directory would be needed.
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org