> Some follow-up questions: > > 1) Permissions on /var/spool/fsvs > > If I run FSVS as root and it creates these as: > > # ls -l /var/spool/fsvs > drwxr-xr-x 3 root root 4096 Jun 3 18:40 5d > > Are there permission leaks that I need to consider? For example, with > regular users on the box be able to read the contents of files that they > wouldn't normally be able to read by getting to them via the pristine > copies under /var/spool/fsvs? (That may even be a nonsensical question, > but it was one of the things I wondered about with using SVN on things > like /etc/shadow.) There are no pristine copies. There are filelists and manber-hashes for files > 128kB (ie. 2 32bit-CRCs and a MD5 per manber-block, which is about 128kB). I don't know whether that qualifies as a security problem ... But you can always set the WAA as 0700.
But look here for details: http://fsvs.tigris.org/doxygen/html/group__waa__files.html > 2) When initializing the FSVS working area, there's no indication in the > README that you should initialize from any particular location on the > file system. > > # fsvs init svn+ssh://[EMAIL PROTECTED]/path/to/repos > > But when I look at the contents of the newly created > /var/spool/fsvs/*/*/* folder: > > lrwxrwxrwx 1 root root 16 Jun 3 18:40 _base -> /root/fsvs-1.1.4 > > Looking farther, it's merely the README that is a bit abbreviated, the > "fsvs help init" screen gives better instructions and indicates that > whereever you are when you do the "init" is where FSVS will consider the > working copy to be. I'll improve the README. > 3) Would the "WAA" variable be better named as "FSVS_WAA"? Yes, you're right. Will be done. > 4) "fsvs init" doesn't give any visual feedback to the user. Even if I > ran it twice on the same location. (The "poke it with a stick" method to > make it complain and give me some feedback?) Init is the old command. The new command is "fsvs urls". As most unix commands it says nothing on success ... Maybe I should change that. Regards, Phil -- Versioning your /etc, /home or even your whole installation? Try fsvs (fsvs.tigris.org)! --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
