Re: [PATCH v3 00/26] inotify support
- From
Duy Nguyen <pclouds@gmail.com>
- Date
- Feb 17, 2014, 12:36 UTC
- Message-ID
- <CACsJy8Ck_Bx6kYOgx+ZMcihXPW4hd38k2U7gsGvhyG-PJhz9cQ@mail.gmail.com>
- In-Reply-To
- <52F7E2BC.5030905@web.de>
On Mon, Feb 10, 2014 at 3:19 AM, Torsten Bögershausen <tboegi@web.de> wrote:
Show 19 quoted lines
> > On 2014-02-08 09.53, Duy Nguyen wrote: >>>> file-watcher.c | 32 ++++++++++++++++++++++++++++++++ >>>> 1 file changed, 32 insertions(+) >>> >>> I feel a little bit unsure about the 700. >>> Most often Git does not care about permissions, >>> and relies on umask being set appropriatly. >>> (Please correct me if I'm wrong) >> >>Git does care. See credential-cache--daemon.c. In fact this function >>is a copy of check_socket_directory() from that file. >> > I was probably a little bit unclear. > Of course credentials should be protected well and stored with 700. > The rest of the repo could be more loose by using adjust_shared_perm(). > Because the whole repo can be shared (or not) and data is visible > to the group or everyone. > (this is a minor issue)
So how about a check whenever a worktree is connected to the daemon, if that worktree has stricter permission, e.g. 0700 vs 0770 of the daemon socket directory, then the daemon refuses the worktree (maybe with a warning)?
-- Duy