{"thread":{"id":"19774","subject":"chrooting git daemon?","startedAt":"2009-06-11T15:30:31Z","lastAt":"2009-06-11T21:27:08Z","messageCount":2,"participants":["Jan Klod","Klas Lindberg"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"116075","messageId":"200906111530.31160.janklodvan@gmail.com","threadId":"19774","inReplyTo":null,"subject":"chrooting git daemon?","fromName":"Jan Klod","fromEmail":"janklodvan@gmail.com","sentAt":"2009-06-11T15:30:31Z","receivedAt":"2009-06-11T15:30:31Z","isPatch":false,"sender":{"key":"janklodvan@gmail.com","avatar":null},"body":"Hello,\nplease, is that hard / complicated to run git daemon in chroot and what are \nthe steps to do it best?\nDo you consider it useless precaution there? \n\nJan\n"},{"id":"116095","messageId":"37C1FAEE-FCE3-4A38-AC89-0AAF3B1174DF@gmail.com","threadId":"19774","inReplyTo":"200906111530.31160.janklodvan@gmail.com","subject":"Re: chrooting git daemon?","fromName":"Klas Lindberg","fromEmail":"klas.lindberg@gmail.com","sentAt":"2009-06-11T21:27:08Z","receivedAt":"2009-06-11T21:27:08Z","isPatch":false,"sender":{"key":"klas.lindberg@gmail.com","avatar":null},"body":"11 jun 2009 kl. 17.30 skrev Jan Klod:\n\n> Hello,\n> please, is that hard / complicated to run git daemon in chroot and  \n> what are\n> the steps to do it best?\n> Do you consider it useless precaution there?\n\nYou do know that chroot is not a security tool, right? If you do want  \nsecurity measures, I'd suggest setting up SSH accounts with the login  \nshell set to git-shell. The main difference is that you can have any  \nnumber of trees served from the same machine without handling them all  \nby the same service instance. If you wanted to accomplish the same  \nwith git-daemon, you'd have to let all of them listen to different  \nports. At least that's how I understand it.\n\nBR / Klas\n"}]}