Re: [PATCH 6/7] read-cache: refuse to create index referring to external objects

From: Duy Nguyen <pclouds@gmail.com>
Date: Jan 28, 2013, 06:57 UTC
Message-ID: <CACsJy8BUhSDEdV3MtoBG1=Xx1OmiYvkvZQffV6cz1_HSAkcf1A@mail.gmail.com>
In-Reply-To: <7vpq0pyfsq.fsf@alter.siamese.dyndns.org>

On Mon, Jan 28, 2013 at 1:36 PM, Junio C Hamano <gitster@pobox.com> wrote:

Show 14 quoted lines

> Duy Nguyen <pclouds@gmail.com> writes:
>
>> On Mon, Jan 28, 2013 at 12:48 PM, Duy Nguyen <pclouds@gmail.com> wrote:
>>> Regardless the submodule odb issue, I think we should prefer
>>> reading local loose objects over alternate packed ones.
>>
>> I think I went from one problem to another and did not make it clear.
>> The reason behind this preference is security.
>
> Reading from ours first would not help you at all if you are lacking
> some that you do need from your local repository and the only
> solution is not to borrow from untrustworthy sources, I think.
>
> You borrow only from a trusted source in the first place, no?

Hmm.. yeah.

-- 
Duy