Re: "git daemon"

From: H. Peter Anvin <hpa@zytor.com>
Date: Jul 16, 2005, 02:06 UTC
Message-ID: <42D86B92.7010303@zytor.com>
In-Reply-To: <Pine.LNX.4.58.0507131946540.17536@g5.osdl.org>

Linus Torvalds wrote:

Show 7 quoted lines

> 
> What I'd ask people to check is how comfortable for example kernel.org 
> would be to have one machine that runs this kind of service? I've tried 
> very hard to set it up so that it doesn't have any security issues: the 
> daemon can be run as "nobody", and it shouldn't ever even write to any 
> files, although I guess we should do a full check of that.
>

Since it can be run as a sequestered user, and we now have plenty of CPU horsepower on the download servers, it seems like it should be an entirely sane thing to do.

Is this thing meant to be run from inetd, or is it a "listen and fork" daemon? Especially the latter case, it absolutely *have* to have protections for:

- "SYN and run" DoS attacks;
- Too many connections from the same IP;
- Too many processes running total.

	-hpa