On Jun 14, 2004, at 6:04 PM, Stefano Mazzocchi wrote:
Dirk-Willem van Gulik wrote:
On Jun 11, 2004, at 10:35 PM, Stefano Mazzocchi wrote:Brian McCallister wrote:
.. snipped subtle umask magic which needs to fit the ... operational culture of the community. ..
Eh not much to elaborate - by removing SSH and direct repo access/direct accounts - and only allowing a) svn throughAs we had some conflicting requirements we pretty much killed all use of svn over ssh - and forced people to use HTTP/DAV (even on localhost). That solved 80% of those problems :-)good hint, thanks.
can you elaborate more on this? [very interested]
apache (and some backup scripts) the whole per-user umask, group access persm etc goes away - there is just the
user ID of the web server and the uid of hte backup and that is it. (Though backup and recovery has a bit more
perms than I like (and we get nice certificate based user mngt - which is really nice as you aint have to keep no
stinking per user secrets).
Dw
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
