- Add instructions for running svnserve as a user different from

"svn", and remove sysconfig variables that are no longer
  effective with the systemd unit. bsc#1049448

OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm:svn/subversion?expand=0&rev=246
This commit is contained in:
Andreas Stieger 2017-07-28 14:19:48 +00:00 committed by Git OBS Bridge
parent 275ac6e5ca
commit 03f81282a1
3 changed files with 38 additions and 29 deletions

View File

@ -12,7 +12,8 @@ Topics:
3. serving several repositories with SVNParentPath
4. serving the repositories at "/"
5. running svnserve
6. quickstart for mod_dontdothat
6. running svnserve under a different user
7. quickstart for mod_dontdothat
================================================================================
@ -177,7 +178,7 @@ The settings files with the options passed to the daemon is is located in:
To start, ensure proper ownership of repositories and run:
service svnserve start
systemctl start svnserve
For further information about multi-method repository access, see
http://svnbook.red-bean.com/en/1.8/svn.serverconfig.multimethod.html
@ -197,7 +198,34 @@ http://svnbook.red-bean.com/en/1.8/svn.serverconfig.svnserve.html#svn.serverconf
================================================================================
6. quickstart for mod_dontdothat
6. running svnserve under a different user
By default, the svnserve daemon will run with the svn:svn user and group.
To configure the user under which the svnserve daemon will be executed:
systemctl edit svnserve
Enter overriding settings as required:
[Service]
User=svn-alternate-user
Group=svn-alternate-group
Verify:
systemctl cat svnserve
Adjust permissions to /srv/svn/repos, /var/run/svnserve to allow the required
read/write access.
Make systemd pick up the changed unit file and restart the service:
systemctl daemon-reload
systemctl restart svnserve
================================================================================
7. quickstart for mod_dontdothat
The apache module mod_dontdothat can be used to prevent users from causing high
load on the server, e.g. checking out the root of the tree or the tags or

View File

@ -1,3 +1,10 @@
-------------------------------------------------------------------
Fri Jul 28 14:18:49 UTC 2017 - astieger@suse.com
- Add instructions for running svnserve as a user different from
"svn", and remove sysconfig variables that are no longer
effective with the systemd unit. bsc#1049448
-------------------------------------------------------------------
Fri Jul 7 11:17:13 UTC 2017 - astieger@suse.com

View File

@ -11,29 +11,3 @@
# See http://svnbook.red-bean.com/en/1.8/svn.serverconfig.svnserve.html#svn.serverconfig.svnserve.auth
#
SVNSERVE_OPTIONS="-d -R -r /srv/svn/repos"
## Type: string
## Default "svn"
#
# svnserve should run as unprivileged user.
# If you want to expose the repository via both svnserve and mod_dav_svn
# (Apache httpd) in parallel, ensure that the apache user is part of the
# svn group and the setgid flag is set on the repositories
# usermod -A svn wwwrun
# chmod -R g+s /srv/svn/repos
# See http://svnbook.red-bean.com/en/1.8/svn.serverconfig.multimethod.html
#
SVNSERVE_USERID="svn"
## Type: string
## Default "svn"
#
# svnserve should run as unprivileged user.
# If you want to expose the repository via both svnserve and mod_dav_svn
# (Apache httpd) in parallel, ensure that the apache user is part of the
# svn group and the setgid flag is set on the repositories
# usermod -A svn wwwrun
# chmod -R g+s /srv/svn/repos
# See http://svnbook.red-bean.com/en/1.8/svn.serverconfig.multimethod.html
#
SVNSERVE_GROUPID="svn"