Network Security RSS Network Security RSS

Source Control

Reply

•
•
Join Date: Jul 2009
Posts: 2
Reputation: sriblon is an unknown quantity at this point 
Solved Threads: 0
sriblon sriblon is offline Offline
Newbie Poster

Source Control

 
0
  #1
Jul 8th, 2009
My company and its servers are based in the US and our developers are in India. Currently the developers have all source code stored locally in India office (huge risk for us), and I want to get access to the files and routinely back them up here in the US.

My concern is that I don't want my developers to experience a long delay when checking in/out files (time is money), so I don't want to move the Source Control software onto our server in the US.

Has anyone used web-based Source Control? Are there security issues? Any suggestions on which to use? The developers are currently using cvsnt in India.

Any other solutions to our vulnerability?

Thank you.
Reply With Quote Quick reply to this message  
•
•
Join Date: Dec 2005
Posts: 5,850
Reputation: Salem has a reputation beyond repute Salem has a reputation beyond repute Salem has a reputation beyond repute Salem has a reputation beyond repute Salem has a reputation beyond repute Salem has a reputation beyond repute Salem has a reputation beyond repute Salem has a reputation beyond repute Salem has a reputation beyond repute Salem has a reputation beyond repute Salem has a reputation beyond repute 
Solved Threads: 749
Team Colleague
Salem's Avatar
Salem Salem is offline Offline
Void main'ers are DOOMed

Re: Source Control

 
0
  #2
Jul 8th, 2009
http://git-scm.com/
Reply With Quote Quick reply to this message  
•
•
Join Date: Feb 2009
Posts: 3,210
Reputation: sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of 
Solved Threads: 572
Sponsor
sknake's Avatar
sknake sknake is offline Offline
.NET Enthusiast

Re: Source Control

 
0
  #3
Jul 9th, 2009
I don't disagree with what Salem recommended ... every source control solution has their advantages and disadvantages. I personally love subversion. You're going to have a few seconds of latency with any cross-continental internet communications so you have to take that as a given. GIT does allow for decentralized commits whereas svn/cvs don't -- but on the other hand -- you only commit code or check out a few times a day at most so a couple of seconds shouldn't really matter.

svn with the addons:
ii  libapache2-svn                        1.4.4dfsg1-1ubuntu3        Subversion server modules for Apache
ii  libsvn1                               1.4.4dfsg1-1ubuntu3        Shared libraries used by Subversion
ii  python-svn                            1.5.1-2                    A(nother) Python interface to Subversion
ii  websvn                                1.61-23                    interface for subversion repositories writte

Then using TRAC to have a web ticketing system that integrates directly with SVN:
ii  trac                                  0.10.4-2                   Enhanced wiki and issue tracking system for

... is a great system for me and my company.

As far as backups you can schedule a cron'd backup to post the files. I use this for daily backups:

bash Syntax (Toggle Plain Text) 
  1. #!/bin/bash
  2. TARBALL=`date +/root/backup/archive/svn.%Y.%m.%d.tar.bz2`
  3. rm -f ${TARBALL}
  4. rm -fr /root/backup/data
  5.  
  6. mkdir -p /root/backup/data/trac
  7. mkdir -p /root/backup/data/svn
  8.  
  9. trac-admin /var/trac/apexcrm hotcopy /root/backup/data/trac/trac-apexcrm >> /dev/null 2>&1
  10. trac-admin /var/trac/cats hotcopy /root/backup/data/trac/trac-cats >> /dev/null 2>&1
  11.  
  12. svnadmin hotcopy /var/lib/svn/apexcrm /root/backup/data/svn/apexcrm
  13. svnadmin hotcopy /var/lib/svn/cats /root/backup/data/svn/cats
  14.  
  15. cp -Rp /etc /root/backup/data
  16. cp /root/backup/backup.sh /root/backup/data/backup.sh
  17.  
  18. cd /root/backup
  19. tar cjf ${TARBALL} data
  20. rm -fr /root/backup/data
  21.  
  22. grep Volume3 /proc/mounts >> /dev/null 2>&1
  23.  
  24. if [ $? -eq "1" ]; then
  25.   mount -t smbfs -o username=administrator,password=XXXXXX //XXserverXX/XXXXX /mnt/XXXXXXx
  26. fi
  27.  
  28. if [ -d /mnt/Volume3/Backup/ ] ; then
  29.   cp ${TARBALL} /mnt/Volume3/Backup/
  30.   find /mnt/Volume3/Backup/ -type f -mtime +7 -iname \*.bz2 -delete
  31. fi
  32.  
  33. find /root/backup/archive/ -type f -mtime +30 -iname \*.bz2 -delete

In this case i'm using samba to mount a local windows share .. but you can easily change the logic to scp, sftp, etc. the backups via another protocol
Scott Knake
Custom Software Development
Apex Software, Inc.
Reply With Quote Quick reply to this message  
•
•
Join Date: Jan 2009
Posts: 1
Reputation: alecthegeek is an unknown quantity at this point 
Solved Threads: 0
alecthegeek alecthegeek is offline Offline
Newbie Poster

Re: Source Control

 
0
  #4
Jul 23rd, 2009
•
•
•
•
Originally Posted by sriblon View Post
My company and its servers are based in the US and our developers are in India. Currently the developers have all source code stored locally in India office (huge risk for us), and I want to get access to the files and routinely back them up here in the US.
Is the risk that the information in the repo is potentially exposed where you cannot control access or that you cannot access the repo to back it up?

Do you want version control access (co and ci) from US?

Cheers

Alec
Reply With Quote Quick reply to this message  
•
•
Join Date: Jul 2009
Posts: 2
Reputation: sriblon is an unknown quantity at this point 
Solved Threads: 0
sriblon sriblon is offline Offline
Newbie Poster

Re: Source Control

 
0
  #5
Jul 24th, 2009
The risk is that I cannot access the repo to back it up. I don't need version control access from the US as all of our developers are there in India.

I am very new to the networking side of computers and would love some help if you know a good way to back-up the India files from here in the US.
Reply With Quote Quick reply to this message  
•
•
Join Date: Feb 2009
Posts: 3,210
Reputation: sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of sknake has much to be proud of 
Solved Threads: 572
Sponsor
sknake's Avatar
sknake sknake is offline Offline
.NET Enthusiast

Re: Source Control

 
0
  #6
Jul 24th, 2009
Have them give you access to the machine running the source control and get the backups...
Scott Knake
Custom Software Development
Apex Software, Inc.
Reply With Quote Quick reply to this message  
Reply

Quick Reply to Thread
This thread is more than three months old.
Perhaps start a new thread instead?
•
•
•
•
•
•
•
•
Message:
•
•
•
•



Similar Threads
Other Threads in the Network Security Forum
Thread Tools Search this Thread



adobe advice antivirus apple blackhat blackmail botnet browser business china crack crime cybercrime daniweb data database dataloss dataprotection development email emailretention encryption europe exploit facebook fail firefox forensic fraud gmail google government hack hacker hacking hardware identity identitytheft idtheft information internet iphone kaspersky koobface law linux malware mcafee mckinnon microsoft military mobile music nasa nationalsecurity network networks news obama password passwords paypal pentagon phishing phone php politics privacy realplayer report research satnav scam school search security skype socialnetworking software softwaredevelopment spam sqlinjection survey symantec terrorism terrorist theft trends trojan trojans twitter uk usb virus vulnerability web word worm yahoo zeroday
About Us | Contact Us | Advertise | DaniWeb | Acceptable Use Policy | RSS Feed

©2003 - 2009 DaniWeb® LLC