From: Junio C Hamano Date: Fri, 16 Dec 2011 18:06:43 GMT Subject: Re: [PATCH] Adding hooks.directory config option; wiring into run_hook Message-ID: <7vmxasie6k.fsf@alter.siamese.dyndns.org> In-Reply-To: Christopher Dale writes: > ... > trusted path execution policies. These systems require that any file > that can be executed exhibit at least the following characteristics: > > * The executable, it's directory, and each directory above it are > not writable. > > Since the hooks directory is within a directory that by it's very nature > requires write permissions,... Sorry, but I am not interested at all. If you can write into $GIT_DIR/config then you can point at any directory with hooks.directory and that would mean it would defeat your "trusted path execution policies".