From: Jonathan Nieder <jrnieder@gmail.com>
Date: Mon, 05 Oct 2020 07:32:02 GMT
Subject: Re: [PATCH 0/7] forbidding symlinked .gitattributes and .gitignore
Message-ID: <20201005073202.GC1166820@google.com>
In-Reply-To: <20201005071751.GA2290770@coredump.intra.peff.net>

Jeff King wrote:

> About 2 years ago as part of a security release we made it illegal to
> have a symlinked .gitmodules file (refusing it both in the index and via
> fsck). At the time we discussed (on the security list) outlawing
> symlinks for other .git files in the same way, but we decided not to do
> so as part of the security release, as it wasn't strictly necessary.
>
> We publicly revisited the topic in:
>
>   https://lore.kernel.org/git/20190114230902.GG162110@google.com/
>
> but there were a few fixes needed, and it got forgotten. So here it is
> again, with those fixes:

Oh!  I'm excited --- at $DAYJOB we've been carrying that patch since
then; I'll be happy to drop it. :)

Jonathan