Hi. Alain Peyrat <[email protected]> writes:
> On 19/11/2012 09:42, Thorsten Glaser wrote: >> On Sat, 17 Nov 2012, Olivier Berger wrote: >> >>> FWIW, I think that I more or less captured the need in >> >> Yes, nice, but it’s still not possible because the >> webserver does not run as the system user behind >> the logged-in (web) user but as www-data. > > Well, to be precise, this is not possible when fusionforge is configured > to allow shell access on the server (the debian way) but this is > possible (but not available now) if fusionforge is configured without > shell access (using WebDAV) like using RPM or source install. > As I said in February last year : Olivier Berger <[email protected]> writes: > Le mercredi 23 février 2011 à 16:48 +0100, Thorsten Glaser a écrit : >> On Wed, 23 Feb 2011, Marcel Baur wrote: >> >> > Could someone share some thoughts on read-only web browsing of private >> > SCM repositories of private projects. >> >> This is currently impossible because viewvc runs with the >> privilegues of the webserver, not the user (whereas SCM >> repository protections operate on UNIX® group layer). > > Actually, it *is* possible to achieve such a setup for instance to make > it act like CGI execution in ~ like homes... > > /me managed to do that once... but the apache config becomes a bit > tricky then. I think that if gitweb can run as a CGI, suEXEC should be able to run it as the user, and not the web server. Hope this helps. Best regards, -- Olivier BERGER http://www-public.it-sudparis.eu/~berger_o/ - OpenPGP-Id: 2048R/5819D7E8 Ingenieur Recherche - Dept INF Institut Mines-Telecom, Telecom SudParis, Evry (France) _______________________________________________ Fusionforge-general mailing list [email protected] http://lists.fusionforge.org/cgi-bin/mailman/listinfo/fusionforge-general
