0
votes
0answers
58 views

Apache2 mod_dav_svn SVNListParentPath dependent on cilent IP / subnet?

Hopefully a simple question. Given the following Apache 2.2 VirtualHost configuration on a local network server with access from the local network and the internet: <VirtualHost *:80> ...
1
vote
1answer
106 views

SVN+SSH On Ubuntu: Locking down security - Passwords

Good day, I have setup a server running Ubuntu 12.04 LTS. I have left the default SSH port as-is for now, and have set up a DynDNS.org account. From a machine, running linux, on a separate network, ...
0
votes
1answer
106 views

What are the permissions to set on SVN root?

I'm trying to provide a remote access to SVN server through Apache. The situation can be illustrated like this: /root /public-project /trunk /branches /restricted-project ...
1
vote
1answer
331 views

How to restrict access to Visual SVN server by specified IP address? [closed]

I need to allow only specific IP addrees to access my visual svn server. Visual SVN 2.6.0 is installed in the server. SERVER : WIndows 2008 R2 I'm accessing the svn by the urls like ...
1
vote
2answers
53 views

Is it possible to limit access to an svn server to not just credentials but to machines as well?

my office has provided laptops to all staff in addition to the new desktops we just have. I have been asked to secure our svn server which is a dedicated server hosted somewhere with ubuntu running on ...
0
votes
1answer
44 views

disallow file types (shell script wordpress security)

We recently got our servers into SVN which has been great, but this causes a lot of problems when using things like WP Filebase for CMS file management. It's also hard to keep the uploads folder ...
-3
votes
1answer
71 views

Is there a way to prevent users from transfer svn checkout files to another computer or data storage?

I have a SVN server under CentOS 6.0 and I would like to know if is there a way to prevent users from transfer svn checkout files to another computer or data storage? Or just similar a encryption ...
4
votes
1answer
68 views

Is allowing automated subversion checkins a bad idea?

I'm a Systems Admin supporting a team of developers, and our subversion repository is protected by HTTP basic authentication tied to a single-signon solution. We also share our infrastructure with ...
0
votes
2answers
184 views

Reflect SVN server to /var/www/ directory & 2 other questions

Question 1: I'm setting up a SVN server on for development, how do I serve the files from the /var/www/ which is my root of my website which I'd like to manage the files via SVN that would reflect ...
6
votes
2answers
213 views

How to limit login attempts to Subversion?

We set up a Subversion server via the Apache module mod_dav_svn and the authentification is done via LDAP. Now we would like to limit the login attempts to Subversion to prevent brute force attacks. ...
14
votes
3answers
661 views

What should I consider to secure SVN on Windows? [closed]

Currently I am using VisualSVN Server and it's only accessible on my home network. Eventually there will be others accessing it, but for now it's just me and I would like to be able to go down to the ...
0
votes
2answers
747 views

How to secure svn+ssh checkout users?

All our SVN repositories are hosted on a dedicated machine on which all the developers have access. Every now and then we need to checkout a repository on a machine we don't own or operate ourselves. ...
4
votes
1answer
151 views

Access, Permissions, and Security for 3rd party developers

Our Marketing department wants to start hiring an outside company to assist in the development and maintenance of our marketing website. The website right now is on FreeBSD (using apache), but with ...
1
vote
1answer
38 views

Create groups in svn

I have a svn repository, but I want to control the access, For example one of the group have access for test folder but don't have access for the test2 folder. It's possible this, or I have to create ...
6
votes
3answers
6k views

How to disabled password authentication for specific users in SSHD

I have read several posts regarding restricting ALL users to Key authentication ONLY, however I want to force only a single user (svn) onto Key auth only, the rest can be key or password. I read How ...
1
vote
1answer
74 views

How do I restrict a post-commit hook?

Yesterday, I mistakenly wrote a post-commit hook that fatally broke my server. In fact, when I committed via TortoiseSVN, I could see the post-commit hook remove significant system resources. When I ...
9
votes
7answers
429 views

Where to maintain central source repository?

What is the industry best practice regarding securing access to source code? I am thinking SSL only connections via apache allowed over to our server on an obscure port that doesn't conflict with ...
2
votes
1answer
202 views

SVN Web-dav isn't asking for authenication

We are running a Ubuntu 9.10 server with Web-Dav to host an SVN repository. Here's my dav_svn.conf settings for it: <Location /svn/myrepo> DAV svn SVNPath /home/svn/myrepo ...
3
votes
3answers
349 views

Subversion and external collaborators: HTTPS vs. VPN

We are currently having some issues with VPN connections. The whole thing slows down development and reaction time. What I was used to in my previous workplace was using SSH for accessing FTP and ...
0
votes
4answers
150 views

Is there a way to secure my server and give 10 untrusted persion my ssh access

Okay here is the situation, I bought a hosting server that gives me version control and ssh access. I'm working on a big project that needs team work so I need at least 10 person around the globe to ...
0
votes
0answers
201 views

Is iptables enough security, if port 80 is the only unblocked port and apache is setup correctly?

We are using PHP,MySQL,SVN, and Apache. I want to know if I assume the local subnet trusted, and allow all ports on our subnet using iptables, then allow only port 80 as open to "anyone". If it is ...
2
votes
4answers
466 views

Best practice to share or allow access to trac and svn to wan internet users security?

What is considered best practice for sharing or allowing users from the internet that are not company related to have access to trac and svn? Should it be on a DMZ, should it be internal with some ...
0
votes
2answers
196 views

SVN Server Security Scanning Tool

We plan to migrate our SVN server from LAN to Internet. We need to convince our management, that our setup is secure enough. Is there any SVN server security scanning tool, to check on the security ...
0
votes
1answer
583 views

Giving apache user the rights to modify subversion repositories

I'm developing a front end to our subversion setup using WebDAV, XSL stylesheets and some php scripts to interface the svn binary. I wrote a simple shell script that sets up a project based on our ...
1
vote
2answers
168 views

Secure .svn folders

I would like to know if it's unsecure to leave the .svn folders accessible to anyone on a webserver eg. : http://yoursite.com/.svn/ if not what's the best way to secure these?
2
votes
5answers
947 views

Is it safe to access my home svn server over the internet? [closed]

I have followed some simple instructions in setting up a SVN server on my windows server at home. It insolve installing the svn binary and setting it up as a service. In my LAN I tried access my svn ...