git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: How to prevent changes to repository by root

From
APAneurin Price <aneurin.price@gmail.com>
Date
Jun 16, 2010, 16:09 UTC
Message-ID
<AANLkTikPNH1ueb5m8JpiB2hU4afd3hv-4qYqSO3QPujl@mail.gmail.com>
In-Reply-To
<AANLkTikLixhYITdJKMFb3Hw2hZvaas1DtiV3x9ThCTZz@mail.gmail.com>
On Mon, Jun 14, 2010 at 04:12, Nazri Ramliy <ayiehere@gmail.com> wrote:
Show 6 quoted lines
> I have a git repository owned by a non-privileged user account on a
> machine that is logged into (via ssh) by multiple users. These multiple users,
> all of them (not at at the same time) do "git pull" on this repository.
>
> Everything is fine as long as they don't do the "git pull" as root.
>
Is there ever any requirement for them to run git as root?

How are they becoming root? If they are using sudo you could forbid running git as root. If they are using su or logging in directly maybe you can get away with some trivial thing like putting 'alias git=/bin/false' in /root/.bashrc - or some wrapper which does something helpful rather than silently fail :-).

Nye
Previous: Nicolas SebrechtNext: Nazri Ramliy
Message 3 of 5 in “How to prevent changes to repository by root”
  1. Nazri RamliyJun 14, 2010
  2. Nicolas SebrechtJun 16, 2010
  3. Aneurin PriceJun 16, 2010
  4. Nazri RamliyJun 17, 2010
  5. Pete HarlanJun 18, 2010

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.