home contents changes options help subscribe edit

Principles

At Savannah we do not allow local shell access to make it harder for users to attempt to exploit vulnerabilities before fixes are applied.

Consequently we only offer bzr+ssh:, so that users cannot run arbitrary commands on the server through commit hooks, in effect getting local access.

Packages' bzr repos are in /srv/bzr on vcs. Server log is /var/lib/bzr/.bzr.log, configuration /root/.bazaar (run bzr --version for this info). Apache logs for the bzr vhost are in /var/log/apache2/bzr. Log for client commands run as root on vcs itself is /root/.bzr.log.

bzr is ultimately invoked from /etc/xinetd.d/bzr-hpss.

web-based repository browser

Loggerhead is currently installed at Savannah for online viewing of bzr repositories. vcs:/var/log/apache2/loggerhead/ has logs.

Commit Emails

Currently commit emails for bzr are supported by an hourly cron located on the vcs host: /etc/cron.hourly/bzr_commit_mail_notification

To enable email commits, add a line to the bzr_commit_mail_notification script:

su PROJECT_ADMIN_USERNAME - -s /bin/bash -c "umask 0002 && /usr/src/bzr-hookless-email/bzr_hookless_email.py -f -e DESIRED_COMMIT_EMAIL REPOSITORY -l 10000"

Example (project admin = reinhard, email target = commit-gnue@gnu.org, project = gnue):

su reinhard - -s /bin/bash -c "umask 0002 && /usr/src/bzr-hookless-email/bzr_hookless_email.py -f -e commit-gnue@gnu.org /srv/bzr/gnue -l 10000"




subject:
  ( 13 subscribers )