Re: [PATCH 0/4] Writing refs in git-ssh-push
- From
- Frank Sorenson <frank@tuxrocks.com>
- Date
- Jun 7, 2005, 05:54 UTC
- Message-ID
- <42A536A2.3040809@tuxrocks.com>
- In-Reply-To
- <Pine.LNX.4.21.0506070032410.30848-100000@iabervon.org>
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Daniel Barkalow wrote:
Show 30 quoted lines
> On Mon, 6 Jun 2005, Linus Torvalds wrote: > > >>Two comments on git-ssh-push from a quick try-to-use-it-but-fail.. >> >> - hardcoding the name of the command on the other side kind of sucks. >> Especially when the user may end up having to install his own version >> under his own subdirectory. You really want to have some way of saying >> "execute /home/user/bin/git-ssh-pull", and since it will depend on the >> site you're pushing to, it should probably be available as a cmd line >> option. >> >> I have a >> >> PATH=$PATH:~/bin >> >> in my .bashrc, but sshd at the other end doesn't end up caring.. > > > sshd is pretty odd that way; I think ~/.ssh/environment might get you your > local path. I thought it was just my sshd that was strange like that, but > it's probably common if yours does it too. I'm not sure if there's a > standard way to pick up a per-user version of the remote program. It seems > like cvs doesn't do anything clever, and sftp makes it a compile-time > option. > > I think an environment variable for the directory to find > git-ssh-(other) in would be easiest to script when needed and would also > reduce the chances of specifying the wrong program on the remote side > (which would generate really confusing errors).
- From the ssh(1) manpage (openssh): Additionally, ssh reads $HOME/.ssh/environment, and adds lines of the format "VARNAME=value" to the environment if the file exists and if users are allowed to change their environment. For more information, see the PermitUserEnvironment option in sshd_config(5).
The default given in sshd_config(5) is not to allow the user-specified environment, because "Enabling environment processing may enable users to bypass access restrictions in some configurations using mechanisms such as LD_PRELOAD."
It looks like something we probably can't count on for sure.
Frank - -- Frank Sorenson - KD7TZK Systems Manager, Computer Science Department Brigham Young University frank@tuxrocks.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCpTaiaI0dwg4A47wRAhoJAJ9h4MUqGZWsT7+22FHaavd2N4ETqQCfTYR3 4qibBinO4TUgsdTNMrtgaxk= =Uutj -----END PGP SIGNATURE-----