[Bug 324271] RFE and Patch: Provide enhanced mod_dav_svn /etc/httpd/conf.d/subversion.conf file.

bugzilla at redhat.com bugzilla at redhat.com
Fri Jul 25 20:28:58 UTC 2008


Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: RFE and Patch:  Provide enhanced mod_dav_svn /etc/httpd/conf.d/subversion.conf file.


https://bugzilla.redhat.com/show_bug.cgi?id=324271


edwin at tenbrink-bekkers.nl changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |edwin at tenbrink-bekkers.nl




------- Additional Comments From edwin at tenbrink-bekkers.nl  2008-07-25 16:28 EST -------
I would like to add the following additional explanation concerning the rights
(owner, group) and SELinux configuration to your file.
Of course, you should read /opt/svn as the location of your repositories, this
is an example path. IMHO you should use something like this to get your
repository up and running through Apache:

# chown -R apache.apache /opt/svn
# /usr/sbin/setsebool -P httpd_builtin_scripting=1
# /usr/sbin/setsebool -P httpd_enable_cgi=1
# /usr/sbin/semanage fcontext -a -t httpd_sys_content_t '/opt/svn(/.*)?'
# /usr/sbin/semanage fcontext -a -t httpd_sys_content_rw_t
'/opt/svn/[^/]+/(dav|db)(/.*)?'
# /usr/sbin/semanage fcontext -a -t httpd_cvs_script_exec_t
'/opt/svn/[^/]+/hooks(/.*)?'
# /sbin/restorecon -Rv /opt/svn

This should get rid of your suggested turning off enforcing.

BTW: Shouldn't there be a way to have the SELinux context set-up correctly when
creating the repository in the first place instead of doing this manually?


-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.




More information about the fedora-triage-list mailing list