Re: Shared bare repository dubious ownership error after 2.40.1-r0

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Mike,

On 7/10/24 18:16, Mike Lodispoto wrote:
| $ git pull
| fatal: detected dubious ownership in repository at
This appears to be known behavior introduced as a fix for CVE-2024-32004. It appears that the safe.directory restrictions now apply to fetch and clone as well. See the release notes for v2.45.1 [1].

You can fix this by adding the path containing your repositories to the safe.directory configuration parameter as Git recommends. Whether or not you should is another matter—this can expose your devs to attacks from other user accounts.

I also have small workgroups that use NFS and other network filesystems to share repositories. Are there any plans to make cloning a local repository safe?

Colin

References

[1]: <https://lore.kernel.org/git/xmqqv83g4937.fsf@gitster.g/>




[Index of Archives]     [Linux Kernel Development]     [Gcc Help]     [IETF Annouce]     [DCCP]     [Netdev]     [Networking]     [Security]     [V4L]     [Bugtraq]     [Yosemite]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux SCSI]     [Fedora Users]

  Powered by Linux