# Setting up a Git server (+ gitweb) with .htaccess files HOWTO 3 messages from 2012-02-13 to 2012-02-14. Participants: Matthieu Moy, Junio C Hamano. Thread: https://gitlist.dev/t/29614 ## Matthieu Moy, 2012-02-13 16:34 Subject: Setting up a Git server (+ gitweb) with .htaccess files HOWTO Message-ID: URL: https://gitlist.dev/e/vpqbop266ak.fsf%40bauges.imag.fr ``` Hi, I've set up a Git server on a machine on which I have a webspace, permission to run CGI scripts, but no shell or root access. Good news: it worked :-). I've documented the process here in case anyone's interested: http://www-verimag.imag.fr/~moy/?Host-a-Git-repository-over-HTTP-S -- Matthieu Moy http://www-verimag.imag.fr/~moy/ ``` ## Junio C Hamano, 2012-02-13 19:10 Subject: Re: Setting up a Git server (+ gitweb) with .htaccess files HOWTO Message-ID: <7v1upyft1b.fsf@alter.siamese.dyndns.org> URL: https://gitlist.dev/e/7v1upyft1b.fsf%40alter.siamese.dyndns.org In-Reply-To: ``` Matthieu Moy writes: > I've set up a Git server on a machine on which I have a webspace, > permission to run CGI scripts, but no shell or root access. Good news: > it worked :-). > > I've documented the process here in case anyone's interested: > > http://www-verimag.imag.fr/~moy/?Host-a-Git-repository-over-HTTP-S After seeing the section that runs "git init" in a throw-away CGI script, I started wondering what the point of this site in forbidding a shell access in the first place. After all, if you changed that example with a script that feeds its input to a shell, you would have enough "shell access" to do anything you need. So... Well, my reaction at this point was "why bother?", but then I realized that that reaction is meant for the administrator of that hosting site, not a user of that site, i.e. you. Thanks for an amusing read, anyway. ``` ## Matthieu Moy, 2012-02-14 08:59 Subject: Re: Setting up a Git server (+ gitweb) with .htaccess files HOWTO Message-ID: URL: https://gitlist.dev/e/vpq7gzpx01m.fsf%40bauges.imag.fr In-Reply-To: <7v1upyft1b.fsf@alter.siamese.dyndns.org> ``` Junio C Hamano writes: > After seeing the section that runs "git init" in a throw-away CGI script, > I started wondering what the point of this site in forbidding a shell > access in the first place. The sysadmin trusts users enough to allow running arbitrary CGI there. Not giving shell access greatly limits the accidental mis-uses of the server, or silly attacks by incompetent users (i.e. "students" ;-) ). A few years ago, people had shell access on most servers, and they were using it to run seti@home & other heavy stuff there. -- Matthieu Moy http://www-verimag.imag.fr/~moy/ ```