On Mon, 2007-06-04 at 22:14 +0000, j.bornschein wrote:
> I solved this whole problem using (Posix1.e) filesystem ACLs:
>
> 1) Activate ACLs on your filesystem: edit /etc/fstab and add "acl" where
> appropriate. Run "mount / -o remount,acl" for immediate effect.
>
> 2) Allow developer group to rwx the base directory an make sure all
> newly created files inherit that ACL:
>
> $ setfacl -m group:developer:rwx /bzr
> $ setfacl -m default:group:developer:rwx /bzr
>
> 3) Proceed as descibed in the shared repository tutorial: run "bzr
> init-repo /bzr" and upload projects to that directory via sftp.
>
> All newly created files will inherit hat ACL. That even solves umask
> problems on linux, because the umask is not used t mask out ACL
> permissions.
>
> Seems to work fine for me...
Cool. Perhaps we should put this in the documentation?
On Mon, 2007-06-04 at 22:14 +0000, j.bornschein wrote: group:developer :rwx /bzr
> I solved this whole problem using (Posix1.e) filesystem ACLs:
>
> 1) Activate ACLs on your filesystem: edit /etc/fstab and add "acl" where
> appropriate. Run "mount / -o remount,acl" for immediate effect.
>
> 2) Allow developer group to rwx the base directory an make sure all
> newly created files inherit that ACL:
>
> $ setfacl -m group:developer:rwx /bzr
> $ setfacl -m default:
>
> 3) Proceed as descibed in the shared repository tutorial: run "bzr
> init-repo /bzr" and upload projects to that directory via sftp.
>
> All newly created files will inherit hat ACL. That even solves umask
> problems on linux, because the umask is not used t mask out ACL
> permissions.
>
> Seems to work fine for me...
Cool. Perhaps we should put this in the documentation?
-Rob
-- www.robertcolli ns.net/ keys.txt>.
GPG key available at: <http://