Svn access auditing?

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

Svn access auditing?

Bo Berglund
I have moved from CVS(nt) to Svn 1.9.7 for our company version
control.
In CVS(nt) we had set up the auditing system, which records repository
activity into an MSSQL database.
Now I am looking for how to implement this in the Svn case.
AFAICT I can do most of what is needed for auditing the *changes* in
the post-commit hook, so I see no real problems there.
But I cannot find any hook for getting information on users accessing
the server to view or download content.
Is there some way to audit non-commit activity in Svn, specifically
checkouts?


--
Bo Berglund
Developer in Sweden

Reply | Threaded
Open this post in threaded view
|

Re: Svn access auditing?

Daniel Shahaf-2
Bo Berglund wrote on Tue, 09 Jan 2018 07:49 +0100:
> Is there some way to audit non-commit activity in Svn, specifically
> checkouts?

Yes, it's called "operational logging".  See http://svnbook.red-bean.com/nightly/en/svn.serverconfig.httpd.html#svn.serverconfig.httpd.extra.logging
Reply | Threaded
Open this post in threaded view
|

Re: Svn access auditing?

Bo Berglund
On Tue, 09 Jan 2018 07:18:48 +0000, Daniel Shahaf
<[hidden email]> wrote:

>Bo Berglund wrote on Tue, 09 Jan 2018 07:49 +0100:
>> Is there some way to audit non-commit activity in Svn, specifically
>> checkouts?
>
>Yes, it's called "operational logging".  
>See http://svnbook.red-bean.com/nightly/en/svn.sererconfig.httpd.html#svn.serverconfig.httpd.extra.logging
v
Thanks, I found a section on this in the pdf book for svn 1.7
(chapter 6, page 202 "Apache logging"
So now I just have to enable it without breaking Apache, I guess...


--
Bo Berglund
Developer in Sweden

Reply | Threaded
Open this post in threaded view
|

Re: Svn access auditing?

Ryan Schmidt-10
In reply to this post by Daniel Shahaf-2

On Jan 9, 2018, at 01:18, Daniel Shahaf wrote:

> Bo Berglund wrote on Tue, 09 Jan 2018 07:49 +0100:
>> Is there some way to audit non-commit activity in Svn, specifically
>> checkouts?
>
> Yes, it's called "operational logging".  See http://svnbook.red-bean.com/nightly/en/svn.serverconfig.httpd.html#svn.serverconfig.httpd.extra.logging

Using this operational log, I wrote a script that effectively gives you post-checkout and post-update hook scripts that you can write to do whatever you want:

http://ryandesign.com/svnhookdispatcher/

I wrote this a long time ago and don't know if it still works.