From: Junio C Hamano <gitster@pobox.com>
Date: Fri, 17 Mar 2017 18:10:13 GMT
Subject: Re: Shared repositories no longer securable against privilege escalation
Message-ID: <xmqqtw6r7p16.fsf@gitster.mtv.corp.google.com>
In-Reply-To: <148976932628.2144.11216577266857568258@richardiv.omgwallhack.org>

Joe Rayhawk <jrayhawk@freedesktop.org> writes:

> that, at least on base POSIX, using --shared to share a repository
> between multiple UIDs literally eliminates the purpose of having
> multiple UIDs.

I do not think the world is _that_ blank-and-white.  If you cannot
trust those who push to the repository, you can give them git-only
access without a shell account and keep separating them with UIDs.
If you can, then the --shared setting is suitable for you.