threads / discuss / 19774

chrooting git daemon?

Subject: chrooting git daemon?

## tl;dr

2 messages between Jun 11, 2009 and Jun 11, 2009.

replies: 1people: 2as markdown or json

Jan Klod· Jun 11, 2009, 15:30 UTC · lore

Hello, please, is that hard / complicated to run git daemon in chroot and what are the steps to do it best? Do you consider it useless precaution there?

Jan
Klas Lindberg· Jun 11, 2009, 21:27 UTC · re: Jan Klod · lore

Re: chrooting git daemon?

11 jun 2009 kl. 17.30 skrev Jan Klod:
Show 5 quoted lines
> Hello,
> please, is that hard / complicated to run git daemon in chroot and  
> what are
> the steps to do it best?
> Do you consider it useless precaution there?

You do know that chroot is not a security tool, right? If you do want security measures, I'd suggest setting up SSH accounts with the login shell set to git-shell. The main difference is that you can have any number of trees served from the same machine without handling them all by the same service instance. If you wanted to accomplish the same with git-daemon, you'd have to let all of them listen to different ports. At least that's how I understand it.

BR / Klas

← back to recent threads