git/list[1] front-page[2] threads[3] people[4] search[5] about
 

using gitconfig to get shell access

From
Sitaram Chamarty <sitaramc@gmail.com>
Date
Feb 6, 2010, 17:33 UTC
Message-ID
<slrnhmr9uh.qqv.sitaramc@sitaramc.homelinux.net>
Hello all,

If I have a bare repo that is accessed only remotely, but I allow arbitrary 'git config' keys to be set on it by the remote user (somehow), can any of them be used to make git run arbitrary commands on the server?

For example, 'hooks.showrev', is a "shell command used to format each revision in the email".

Of course that's only in contrib, but are there any like that in the main git config settings? I took a look through man git-config and offhand I couldn't find any, but if someone knows more definitively I'd appreciate hearing about it.

Thanks,
Sitaram
Message 1 of 1 in “using gitconfig to get shell access”
  1. Sitaram ChamartyFeb 6, 2010

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.