Re: How should git-config include.path option work in ~/.gitconfig file?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sun, Jun 22, 2014 at 01:00:53PM -0600, Cox, Michael wrote:

> I like the idea of recognizing environment variable syntax in config files,
> at least a feature that would allow *some* config variables to be specified
> as accepting environment variable syntax.  It adds a lot of flexibility,
> but I'm sure it might also introduce security issues that I am completely
> unaware of (like the  issue you made me aware of above).

I don't think there are any security issues; if you control the
environment, you can already execute arbitrary code with git.

Now we just need somebody to volunteer to implement it. :)

-Peff
--
To unsubscribe from this list: send the line "unsubscribe git" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [Linux Kernel Development]     [Gcc Help]     [IETF Annouce]     [DCCP]     [Netdev]     [Networking]     [Security]     [V4L]     [Bugtraq]     [Yosemite]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux SCSI]     [Fedora Users]