I changed my repository parent so that it is not readable, not writable, not searchable by anyone except the owner, which is www-data (the user that Apache runs as) -
*    drwx------ 2 www-data www-data 4096 2011-07-22 15:45 /data/svn*
I figure that will keep other users away from the contents. Only root and Apache can see the contents and therefore do anything with it.

Reply via email to