Re: git server changes - how to allow https AND ssh now that /srv/git/xxx.git must be owned by http?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



🤔 maybe you can give yourself permissions to http owned files with ACLs

https://www.redhat.com/sysadmin/linux-access-control-lists


On Sun, Jun 16, 2024, 20:39 David C. Rankin <drankinatty@xxxxxxxxx> wrote:
On 6/16/24 05:30, Guus Snijders wrote:
> Have you tried using http:david instead?
> And make sure the files are group-writable.
>
> I haven't tested this, but this seems to answer all the mentioned constraints.
>

Thank you Guus,

   Unfortunately, yes, I've tried every combination of user:group ownership
and it is really unfortunate that git won't server https unless the
directories are 'owned' by http. I've even tried adding myself to the http
group, but no luck.

   Why I can't chmod 0775 repodir.git and then use david:http is indeed
stange, but git requires http:dontcare to server https.

   Of course ssh requires david:dontcare to server git over ssh.

   I'll have to try Ryan's binfs work around and see if I can make something
like that work. It's just wild that git doesn't have a published fix for this
after the security change.

   github does something. I can pull over https and ssh still works there. It
may be worth opening an issue with git to see how they feel this catch 22
should be handled for locally hosted servers. If I find a fix, I'll report back.

--
David C. Rankin, J.D.,P.E.


[Index of Archives]     [Linux Wireless]     [Linux Kernel]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [Share Photos]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]

  Powered by Linux