diff --git a/subversion.README.SUSE b/subversion.README.SUSE index 454c7b5..b34d523 100644 --- a/subversion.README.SUSE +++ b/subversion.README.SUSE @@ -12,7 +12,8 @@ Topics: 3. serving several repositories with SVNParentPath 4. serving the repositories at "/" 5. running svnserve -6. quickstart for mod_dontdothat +6. running svnserve under a different user +7. quickstart for mod_dontdothat ================================================================================ @@ -177,7 +178,7 @@ The settings files with the options passed to the daemon is is located in: To start, ensure proper ownership of repositories and run: - service svnserve start + systemctl start svnserve For further information about multi-method repository access, see http://svnbook.red-bean.com/en/1.8/svn.serverconfig.multimethod.html @@ -197,7 +198,34 @@ http://svnbook.red-bean.com/en/1.8/svn.serverconfig.svnserve.html#svn.serverconf ================================================================================ -6. quickstart for mod_dontdothat +6. running svnserve under a different user + +By default, the svnserve daemon will run with the svn:svn user and group. +To configure the user under which the svnserve daemon will be executed: + + systemctl edit svnserve + +Enter overriding settings as required: + + [Service] + User=svn-alternate-user + Group=svn-alternate-group + +Verify: + + systemctl cat svnserve + +Adjust permissions to /srv/svn/repos, /var/run/svnserve to allow the required +read/write access. + +Make systemd pick up the changed unit file and restart the service: + + systemctl daemon-reload + systemctl restart svnserve + +================================================================================ + +7. quickstart for mod_dontdothat The apache module mod_dontdothat can be used to prevent users from causing high load on the server, e.g. checking out the root of the tree or the tags or diff --git a/subversion.changes b/subversion.changes index ba5fb13..8240268 100644 --- a/subversion.changes +++ b/subversion.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Fri Jul 28 14:18:49 UTC 2017 - astieger@suse.com + +- Add instructions for running svnserve as a user different from + "svn", and remove sysconfig variables that are no longer + effective with the systemd unit. bsc#1049448 + ------------------------------------------------------------------- Fri Jul 7 11:17:13 UTC 2017 - astieger@suse.com diff --git a/subversion.sysconfig.svnserve b/subversion.sysconfig.svnserve index 89dd563..c36e99c 100644 --- a/subversion.sysconfig.svnserve +++ b/subversion.sysconfig.svnserve @@ -11,29 +11,3 @@ # See http://svnbook.red-bean.com/en/1.8/svn.serverconfig.svnserve.html#svn.serverconfig.svnserve.auth # SVNSERVE_OPTIONS="-d -R -r /srv/svn/repos" - -## Type: string -## Default "svn" -# -# svnserve should run as unprivileged user. -# If you want to expose the repository via both svnserve and mod_dav_svn -# (Apache httpd) in parallel, ensure that the apache user is part of the -# svn group and the setgid flag is set on the repositories -# usermod -A svn wwwrun -# chmod -R g+s /srv/svn/repos -# See http://svnbook.red-bean.com/en/1.8/svn.serverconfig.multimethod.html -# -SVNSERVE_USERID="svn" - -## Type: string -## Default "svn" -# -# svnserve should run as unprivileged user. -# If you want to expose the repository via both svnserve and mod_dav_svn -# (Apache httpd) in parallel, ensure that the apache user is part of the -# svn group and the setgid flag is set on the repositories -# usermod -A svn wwwrun -# chmod -R g+s /srv/svn/repos -# See http://svnbook.red-bean.com/en/1.8/svn.serverconfig.multimethod.html -# -SVNSERVE_GROUPID="svn"