By default, Subversion allows users to save their password in plaintext in ~/.subversion/auth/svn.simple
. I'm investigating options for storing encrypted passwords in svn, but at the very least and ASAP, I want to completely disable the ability to store passwords for all of our users. We are running Subversion 1.6.17.
I can disable this within a user's home directory via the config file.
~/.subversion/servers:
[global]
# Password / passphrase caching parameters:
store-passwords = no
store-plaintext-passwords = no
However, the user could change the config file if they wanted to. Is there not a system-wide svn config file? A few options I've seen:
Option 1
In 1.8-dev, Subversion's configure script accepts a --disable-plaintext-password-storage option to bypass the logic which stores plaintext passwords and client certificate passphrases.
I prefer not to update to a development release.
Option 2
/etc/subversion/config
AFAIK, this config file is only used when a user doesn't have a config file already in their home directory.
Option 3
Add a cron job to delete the user's auth cache in ~/.subversion/auth/svn.simple
. So, even if they alter their svn config file, then our cron job would kill any stored passwords. However, even running it every minute doesn't guarantee that our backup system wouldn't grab the file(s) containing plaintext passwords.
Ideas?