Shaun Kruger wrote: >I just looked into the hook scripts. If they could be setup with >setuid bit set they would take on the premissions of the user who owns >the repository when they run. The next problem is how to force it to >run setuid the owning user or not at all. > > A bit of context: The security problem was that Apache would run Subversion commit hook programs as www-data.
_______________________________________________ HCoop-Discuss mailing list [email protected] http://hcoop.net/cgi-bin/mailman/listinfo/hcoop-discuss
