From: Shawn Pearce <spearce@spearce.org>
Date: Thu, 07 Dec 2006 20:16:25 GMT
Subject: Re: Locked down (but still shared) repositories
Message-ID: <20061207201625.GA12502@spearce.org>
In-Reply-To: <45786F5A.6020400@dawes.za.net>

Rogan Dawes <discard@dawes.za.net> wrote:
> Shawn Pearce wrote:
> >In the situation you describe everyone looks the same to the
> >update hook...
> 
> See Section 8.2.6.1
> 
> http://www.unix.org.ua/orelly/networking_2ndEd/ssh/ch08_02.htm
> 
> You should be able to do something similar for git as they do for SSH.

Ok, I just learned something new.  Thank you!

Forced commands on a per-key basis would certainly work.  I'm not
settled on the idea as the end solution, but it does seem to be
perhaps slightly better than the setuid approach.

--