# chrooting git daemon?

2 messages from 2009-06-11 to 2009-06-11. Participants: Jan Klod, Klas Lindberg.
Thread: https://gitlist.dev/t/19774

## Jan Klod, 2009-06-11 15:30

Subject: chrooting git daemon?
Message-ID: <200906111530.31160.janklodvan@gmail.com>
URL: https://gitlist.dev/e/200906111530.31160.janklodvan%40gmail.com

```
Hello,
please, is that hard / complicated to run git daemon in chroot and what are 
the steps to do it best?
Do you consider it useless precaution there? 

Jan

```

## Klas Lindberg, 2009-06-11 21:27

Subject: Re: chrooting git daemon?
Message-ID: <37C1FAEE-FCE3-4A38-AC89-0AAF3B1174DF@gmail.com>
URL: https://gitlist.dev/e/37C1FAEE-FCE3-4A38-AC89-0AAF3B1174DF%40gmail.com
In-Reply-To: <200906111530.31160.janklodvan@gmail.com>

```
11 jun 2009 kl. 17.30 skrev Jan Klod:

> Hello,
> please, is that hard / complicated to run git daemon in chroot and  
> what are
> the steps to do it best?
> Do you consider it useless precaution there?

You do know that chroot is not a security tool, right? If you do want  
security measures, I'd suggest setting up SSH accounts with the login  
shell set to git-shell. The main difference is that you can have any  
number of trees served from the same machine without handling them all  
by the same service instance. If you wanted to accomplish the same  
with git-daemon, you'd have to let all of them listen to different  
ports. At least that's how I understand it.

BR / Klas

```