From: Junio C Hamano <gitster@pobox.com>
Date: Sun, 01 Nov 2026 18:31:47 GMT
Subject: Re: [PATCH] Documentation: clarify Git's security boundary
Message-ID: <xmqqy0bcz9m4.fsf@gitster.g>
In-Reply-To: <pull.2286.git.1793362370899.gitgitgadget@gmail.com>

"Johannes Schindelin via GitGitGadget" <gitgitgadget@gmail.com>
writes:

> +Serving an untrusted repository to `git clone` still exposes
> +linkgit:git-upload-pack[1] to that repository. For additional isolation,
> +`upload-pack` can be run as an unprivileged user where the platform permits it.

This tricky thing is often forgotten, but it is nice to see it
mentioned.  'git help upload-pack' also mentions this facility.
Overall the document was a pleasant read.

Thanks.