Apache Security SVN

I installed a local SVN repo with https apache access on an ubuntu machine using this example: How to set up a Subversion server (SVN) on GNU / Linux - Ubuntu

Everything works great.
The next step is to allow users to access SVN over the Internet. This works, but here is my question: Currently it seems that everyone can see the files. Using TortSVN, I see everything and it only asks for the username / pw if I make changes. How to make sure that no one can see the repo or any files if you are not prompted to enter user / pw?

+3
source share
2 answers

: httpd.conf:

<LimitExcept GET PROPFIND OPTIONS REPORT>
</LimitExcept>

:.

httpd-config:

 AuthzSVNAccessFile /path/to/access/file

//access/file:

[groups]
devs = developer1, developer2
mgr = manager1, manager2

[/]
* = 
@devs= rw
@mgr = r
pparker = rw

[] ,

[/]

  • (r)
  • (rw)

- . at (@) . "pparker" .

+4

svnserve.conf, :

anon-access = none

conf/ . , .

0

Source: https://habr.com/ru/post/1717275/


All Articles