"Derrick Stolee via GitGitGadget" <gitgitgadget@xxxxxxxxx> writes:
> To simplify the reactions necessary for these users, extend the
> definition of the safe.directory config value to include a possible '*'
> value. This value implies that all directories are safe, providing a
> single setting to opt-out of this protection.
OK. During the development of the original fix, we discussed if a
more flexible mechanism, like allowing globs, but ended up with the
simplest and easiest to explain option, with the expectation that we
may want to loosen it later as necessary. And this is certainly
what we would have expected to add.
> Note that an empty assignment of safe.directory clears all previous
> values, and this is already the case with the "if (!value || !*value)"
> condition.
OK.
> if (strcmp(key, "safe.directory"))
> return 0;
>
> - if (!value || !*value)
> + if (!value || !*value) {
> data->is_safe = 0;
> - else {
> + } else if (!strcmp(value, "*")) {
> + data->is_safe = 1;
> + } else {
> const char *interpolated = NULL;
>
> if (!git_config_pathname(&interpolated, key, value) &&
> diff --git a/t/t0033-safe-directory.sh b/t/t0033-safe-directory.sh
OK.
> index 6f33c0dfefa..239d93f4d21 100755
> --- a/t/t0033-safe-directory.sh
> +++ b/t/t0033-safe-directory.sh
> @@ -36,4 +36,14 @@ test_expect_success 'safe.directory matches, but is reset' '
> expect_rejected_dir
> '
>
> +test_expect_success 'safe.directory=*' '
> + git config --global --add safe.directory "*" &&
> + git status
> +'
> +
> +test_expect_success 'safe.directory=*, but is reset' '
> + git config --global --add safe.directory "" &&
> + expect_rejected_dir
> +'
Thanks.
