git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: Shared repositories no longer securable against privilege escalation

From
Junio C Hamano <gitster@pobox.com>
Date
Mar 17, 2017, 18:10 UTC
Message-ID
<xmqqtw6r7p16.fsf@gitster.mtv.corp.google.com>
In-Reply-To
<148976932628.2144.11216577266857568258@richardiv.omgwallhack.org>
Joe Rayhawk <jrayhawk@freedesktop.org> writes:
> that, at least on base POSIX, using --shared to share a repository
> between multiple UIDs literally eliminates the purpose of having
> multiple UIDs.

I do not think the world is _that_ blank-and-white. If you cannot trust those who push to the repository, you can give them git-only access without a shell account and keep separating them with UIDs. If you can, then the --shared setting is suitable for you.

Previous: Joe RayhawkNext: Joe Rayhawk
Message 5 of 9 in “Shared repositories no longer securable against privilege escalation”
  1. Joe RayhawkMar 17, 2017
  2. Michael HaggertyMar 17, 2017
  3. Junio C HamanoMar 17, 2017
  4. Joe RayhawkMar 17, 2017
  5. Junio C HamanoMar 17, 2017
  6. Joe RayhawkMar 17, 2017
  7. Jakub NarębskiMar 18, 2017
  8. Junio C HamanoMar 17, 2017
  9. Ævar Arnfjörð BjarmasonMar 18, 2017

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.