Hello community, here is the log from the commit of package subversion for openSUSE:Factory checked in at 2017-08-06 11:32:16 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/subversion (Old) and /work/SRC/openSUSE:Factory/.subversion.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "subversion" Sun Aug 6 11:32:16 2017 rev:147 rq:512929 version:1.9.6 Changes: -------- --- /work/SRC/openSUSE:Factory/subversion/subversion.changes 2017-07-12 19:31:44.712435032 +0200 +++ /work/SRC/openSUSE:Factory/.subversion.new/subversion.changes 2017-08-06 11:32:17.664599443 +0200 @@ -1,0 +2,7 @@ +Fri Jul 28 14:18:49 UTC 2017 - astie...@suse.com + +- Add instructions for running svnserve as a user different from + "svn", and remove sysconfig variables that are no longer + effective with the systemd unit. bsc#1049448 + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ subversion.README.SUSE ++++++ --- /var/tmp/diff_new_pack.CgIt1M/_old 2017-08-06 11:32:20.796158251 +0200 +++ /var/tmp/diff_new_pack.CgIt1M/_new 2017-08-06 11:32:20.824154307 +0200 @@ -12,7 +12,8 @@ 3. serving several repositories with SVNParentPath 4. serving the repositories at "/" 5. running svnserve -6. quickstart for mod_dontdothat +6. running svnserve under a different user +7. quickstart for mod_dontdothat ================================================================================ @@ -177,7 +178,7 @@ To start, ensure proper ownership of repositories and run: - service svnserve start + systemctl start svnserve For further information about multi-method repository access, see http://svnbook.red-bean.com/en/1.8/svn.serverconfig.multimethod.html @@ -197,7 +198,34 @@ ================================================================================ -6. quickstart for mod_dontdothat +6. running svnserve under a different user + +By default, the svnserve daemon will run with the svn:svn user and group. +To configure the user under which the svnserve daemon will be executed: + + systemctl edit svnserve + +Enter overriding settings as required: + + [Service] + User=svn-alternate-user + Group=svn-alternate-group + +Verify: + + systemctl cat svnserve + +Adjust permissions to /srv/svn/repos, /var/run/svnserve to allow the required +read/write access. + +Make systemd pick up the changed unit file and restart the service: + + systemctl daemon-reload + systemctl restart svnserve + +================================================================================ + +7. quickstart for mod_dontdothat The apache module mod_dontdothat can be used to prevent users from causing high load on the server, e.g. checking out the root of the tree or the tags or ++++++ subversion.sysconfig.svnserve ++++++ --- /var/tmp/diff_new_pack.CgIt1M/_old 2017-08-06 11:32:21.128111483 +0200 +++ /var/tmp/diff_new_pack.CgIt1M/_new 2017-08-06 11:32:21.128111483 +0200 @@ -11,29 +11,3 @@ # See http://svnbook.red-bean.com/en/1.8/svn.serverconfig.svnserve.html#svn.serverconfig.svnserve.auth # SVNSERVE_OPTIONS="-d -R -r /srv/svn/repos" - -## Type: string -## Default "svn" -# -# svnserve should run as unprivileged user. -# If you want to expose the repository via both svnserve and mod_dav_svn -# (Apache httpd) in parallel, ensure that the apache user is part of the -# svn group and the setgid flag is set on the repositories -# usermod -A svn wwwrun -# chmod -R g+s /srv/svn/repos -# See http://svnbook.red-bean.com/en/1.8/svn.serverconfig.multimethod.html -# -SVNSERVE_USERID="svn" - -## Type: string -## Default "svn" -# -# svnserve should run as unprivileged user. -# If you want to expose the repository via both svnserve and mod_dav_svn -# (Apache httpd) in parallel, ensure that the apache user is part of the -# svn group and the setgid flag is set on the repositories -# usermod -A svn wwwrun -# chmod -R g+s /srv/svn/repos -# See http://svnbook.red-bean.com/en/1.8/svn.serverconfig.multimethod.html -# -SVNSERVE_GROUPID="svn"
