Re: git server changes - how to allow https AND ssh now that /srv/git/xxx.git must be owned by http?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



On 24/06/16 03:41AM, David C. Rankin wrote:
> All,

Hello everyone,

>   After recent git update, read only repos hosted on a local Apache server
> could no longer pull over https. (gitweb remained fine) Repositories closed
> read/write over ssh were fine.
> 
>   On the server the repositories under /srv/git were owned david:david (me).
> However, after the git change, git refused to serve over https unless the
> directories under /srv/git were owned by http.

I think this is due to a change in git 2.45.1 that fixed a few security
issues[0] and also made our internal workflows fail. The relevant change
in devtools[1] contains a possible workaround, but this of course
depends on whether you can treat the repositories as trusted or not.

Cheers,
chris

[0]: https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.45.1.txt
[1]: https://gitlab.archlinux.org/archlinux/devtools/-/commit/7cb72699f651a9e7ac8996070b974e1dda0a9733

Attachment: signature.asc
Description: PGP signature


[Index of Archives]     [Linux Wireless]     [Linux Kernel]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [Share Photos]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]

  Powered by Linux