Re: ssh+svn vs. bash security bug?

2014-09-26 Thread Philip Martin
Vincent Lefevre writes: > How can this be possible? Do you mean that OpenSSH starts the command > with bash instead of some exec* function or /bin/sh (which is dash on > my machines)? OpenSSH uses the login shell for the user, from session.c: /* * Execute the command using the

Re: ssh+svn vs. bash security bug?

2014-09-26 Thread jblist
On Sep 26, 2014, at 3:59 PM, Vincent Lefevre wrote: > On 2014-09-24 19:28:51 +0300, Stefan Sperling wrote: >> From what I understand after reading about the problem briefly: >> >> In an svn+ssh setup svn clients run 'svnserve -t' by default. >> But there is no reason this could not be changed t

Re: ssh+svn vs. bash security bug?

2014-09-26 Thread Vincent Lefevre
On 2014-09-24 19:28:51 +0300, Stefan Sperling wrote: > From what I understand after reading about the problem briefly: > > In an svn+ssh setup svn clients run 'svnserve -t' by default. > But there is no reason this could not be changed to '/bin/bash' by > an attacker. > > Note that forcing a comm

Re: SVN Commit Failed For Data larger Than 2 GB [How To Resolve]

2014-09-26 Thread Mohsin Abbas
Thanks Philip Martin for your reply. I'll share error.log portion sortly meanwhile I have question I am using Apache 2.2.24 (DAV module via http) with svn V1.8.9 and apache web server have limit of request body 2 GB then how can you say more than 2 GB data can be commited in svn ? This thing is co

Return code of "svn checkout" when failing to get an external

2014-09-26 Thread Matthias Klein
Hi, at a large svn checkout I have the problem that sometime the externals can not checked out. Then I only see in the output log a warning W20 or W000104 "Unable to connect to a repository at URL". But the return code of "svn checkout" is always 0 (in the error / warning) case. Is it

Re: commit failed due to "backwards-sliding source views" - what do I do?

2014-09-26 Thread svnswapnil
Do we have any solution on this problem, I am also facing this issue intermittently "svn diff has backwards sliding source views commit error from slave repository", Is it really associated with some antivirus, then exactly what needs to be done to address it. Currently only work-around which has

Re: SVN Commit Failed For Data larger Than 2 GB [How To Resolve]

2014-09-26 Thread Philip Martin
Mohsin Abbas writes: > I am using Subversion 1.8.9 server on linux OS and tortoise SVN client > at windows. When I try to commit data larger then 2+ GB my commit > failed. I tried to google on different websites they provided below > solution : > > 1 : Set LimitRequestBody to 0 in the server side