- Add instructions for running svnserve as a user different from

"svn", and remove sysconfig variables that are no longer
  effective with the systemd unit. bsc#1049448

OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=246
This commit is contained in:
Andreas Stieger 2017-07-28 14:19:48 +00:00 committed by Git OBS Bridge
parent 275ac6e5ca
commit 03f81282a1
3 changed files with 38 additions and 29 deletions

View File

@ -12,7 +12,8 @@ Topics:
3. serving several repositories with SVNParentPath 3. serving several repositories with SVNParentPath
4. serving the repositories at "/" 4. serving the repositories at "/"
5. running svnserve 5. running svnserve
6. quickstart for mod_dontdothat 6. running svnserve under a different user
7. quickstart for mod_dontdothat
================================================================================ ================================================================================
@ -177,7 +178,7 @@ The settings files with the options passed to the daemon is is located in:
To start, ensure proper ownership of repositories and run: To start, ensure proper ownership of repositories and run:
service svnserve start systemctl start svnserve
For further information about multi-method repository access, see For further information about multi-method repository access, see
http://svnbook.red-bean.com/en/1.8/svn.serverconfig.multimethod.html http://svnbook.red-bean.com/en/1.8/svn.serverconfig.multimethod.html
@ -197,7 +198,34 @@ http://svnbook.red-bean.com/en/1.8/svn.serverconfig.svnserve.html#svn.serverconf
================================================================================ ================================================================================
6. quickstart for mod_dontdothat 6. running svnserve under a different user
By default, the svnserve daemon will run with the svn:svn user and group.
To configure the user under which the svnserve daemon will be executed:
systemctl edit svnserve
Enter overriding settings as required:
[Service]
User=svn-alternate-user
Group=svn-alternate-group
Verify:
systemctl cat svnserve
Adjust permissions to /srv/svn/repos, /var/run/svnserve to allow the required
read/write access.
Make systemd pick up the changed unit file and restart the service:
systemctl daemon-reload
systemctl restart svnserve
================================================================================
7. quickstart for mod_dontdothat
The apache module mod_dontdothat can be used to prevent users from causing high The apache module mod_dontdothat can be used to prevent users from causing high
load on the server, e.g. checking out the root of the tree or the tags or load on the server, e.g. checking out the root of the tree or the tags or

View File

@ -1,3 +1,10 @@
-------------------------------------------------------------------
Fri Jul 28 14:18:49 UTC 2017 - astieger@suse.com
- Add instructions for running svnserve as a user different from
"svn", and remove sysconfig variables that are no longer
effective with the systemd unit. bsc#1049448
------------------------------------------------------------------- -------------------------------------------------------------------
Fri Jul 7 11:17:13 UTC 2017 - astieger@suse.com Fri Jul 7 11:17:13 UTC 2017 - astieger@suse.com

View File

@ -11,29 +11,3 @@
# See http://svnbook.red-bean.com/en/1.8/svn.serverconfig.svnserve.html#svn.serverconfig.svnserve.auth # See http://svnbook.red-bean.com/en/1.8/svn.serverconfig.svnserve.html#svn.serverconfig.svnserve.auth
# #
SVNSERVE_OPTIONS="-d -R -r /srv/svn/repos" SVNSERVE_OPTIONS="-d -R -r /srv/svn/repos"
## Type: string
## Default "svn"
#
# svnserve should run as unprivileged user.
# If you want to expose the repository via both svnserve and mod_dav_svn
# (Apache httpd) in parallel, ensure that the apache user is part of the
# svn group and the setgid flag is set on the repositories
# usermod -A svn wwwrun
# chmod -R g+s /srv/svn/repos
# See http://svnbook.red-bean.com/en/1.8/svn.serverconfig.multimethod.html
#
SVNSERVE_USERID="svn"
## Type: string
## Default "svn"
#
# svnserve should run as unprivileged user.
# If you want to expose the repository via both svnserve and mod_dav_svn
# (Apache httpd) in parallel, ensure that the apache user is part of the
# svn group and the setgid flag is set on the repositories
# usermod -A svn wwwrun
# chmod -R g+s /srv/svn/repos
# See http://svnbook.red-bean.com/en/1.8/svn.serverconfig.multimethod.html
#
SVNSERVE_GROUPID="svn"