Re: chrooting git daemon?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



11 jun 2009 kl. 17.30 skrev Jan Klod:

Hello,
please, is that hard / complicated to run git daemon in chroot and what are
the steps to do it best?
Do you consider it useless precaution there?

You do know that chroot is not a security tool, right? If you do want security measures, I'd suggest setting up SSH accounts with the login shell set to git-shell. The main difference is that you can have any number of trees served from the same machine without handling them all by the same service instance. If you wanted to accomplish the same with git-daemon, you'd have to let all of them listen to different ports. At least that's how I understand it.

BR / Klas

--
To unsubscribe from this list: send the line "unsubscribe git" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Kernel Development]     [Gcc Help]     [IETF Annouce]     [DCCP]     [Netdev]     [Networking]     [Security]     [V4L]     [Bugtraq]     [Yosemite]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux SCSI]     [Fedora Users]