Re: [PATCH] (to improve gitosis support) CVS Server: Support reading base and roots from environment
- From
Phil Miller <mille121@illinois.edu>
- Date
- Nov 18, 2009, 04:11 UTC
- Message-ID
- <81f018ac0911172011la6948cfk8b5e95e6d8f796e@mail.gmail.com>
- In-Reply-To
- <81f018ac0911120925w848594dt276735955681e8f@mail.gmail.com>
I've seen no response or comment on this since sending it in. Does it need revision of some sort? Did it just get lost in the shuffle? I'll be happy to do the legwork to get this integrated, so that I don't have to carry it in a private git tree.
Phil
On Thu, Nov 12, 2009 at 11:25, Phil Miller <mille121@illinois.edu> wrote:
Show 20 quoted lines
> The Gitosis single-account Git/ssh hosting system runs git commands
> through git-shell after confirming that the connecting user is
> authorized to access the requested repository. This works well for
> upload-pack and receive-pack, which take a repository argument through
> git-shell. This doesn't work so well for `cvs server', which is passed
> through literally, with no arguments. Allowing arguments risks
> sneaking in `--export-all', so that restriction should be maintained.
>
> Despite that, passing a list of repository roots is necessary for
> per-user access control by the hosting software, and passing a base
> path improves usability without weakening security. Thus,
> git-cvsserver needs to come up with these values at runtime by some
> other means. Since git-shell preserves the environment for other
> purposes, the environment can carry these arguments as well.
>
> Thus, modify git-cvsserver to read $GIT_CVSSERVER_{BASE_PATH,ROOTS} in
> the absence of equivalent command line arguments.
>
> Signed-off-by: Phil Miller <mille121@illinois.edu>
>