Re: [PATCH 0/7] forbidding symlinked .gitattributes and .gitignore
- From
Jonathan Nieder <jrnieder@gmail.com>
- Date
- Oct 5, 2020, 07:32 UTC
- Message-ID
- <20201005073202.GC1166820@google.com>
- In-Reply-To
- <20201005071751.GA2290770@coredump.intra.peff.net>
Jeff King wrote:
Show 12 quoted lines
> About 2 years ago as part of a security release we made it illegal to > have a symlinked .gitmodules file (refusing it both in the index and via > fsck). At the time we discussed (on the security list) outlawing > symlinks for other .git files in the same way, but we decided not to do > so as part of the security release, as it wasn't strictly necessary. > > We publicly revisited the topic in: > > https://lore.kernel.org/git/20190114230902.GG162110@google.com/ > > but there were a few fixes needed, and it got forgotten. So here it is > again, with those fixes:
Oh! I'm excited --- at $DAYJOB we've been carrying that patch since then; I'll be happy to drop it. :)
Jonathan