From: Tony Luck <tony.luck@gmail.com>
To: Linus Torvalds <torvalds@osdl.org>
Cc: Roland Dreier <rolandd@cisco.com>,
Sam Ravnborg <sam@ravnborg.org>,
Peter Osterlund <petero2@telia.com>,
Linux Kernel Mailing List <linux-kernel@vger.kernel.org>,
Git Mailing List <git@vger.kernel.org>
Subject: Re: What's up with the GIT archive on www.kernel.org?
Date: Mon, 12 Sep 2005 11:22:58 -0700 [thread overview]
Message-ID: <12c511ca050912112266470d8b@mail.gmail.com> (raw)
In-Reply-To: <Pine.LNX.4.58.0509111422510.3242@g5.osdl.org>
On 9/11/05, Linus Torvalds <torvalds@osdl.org> wrote:
> There is such an anonymous server, btw: "git-daemon" implements anonymous
> access much more efficient than rsync/http. Sadly, kernel.org still
> doesn't offer it (but it's now used in the wild, ie I've done a couple of
> merges with people running the git daemon).
Should the git daemon take a look at objects/info/alternates to check
that if it exists, it
points to a repository that also has a "git-daemon-export-ok" file?
I don't see that this
could be used for anything nasty, but it does provide a loophole where
the daemon may
open files outside the initial repository ... so a sanity check seems in order.
-Tony
next prev parent reply other threads:[~2005-09-12 18:23 UTC|newest]
Thread overview: 23+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-09-11 16:02 What's up with the GIT archive on www.kernel.org? Peter Osterlund
2005-09-11 16:12 ` Linus Torvalds
2005-09-11 18:57 ` Sam Ravnborg
2005-09-11 19:06 ` Linus Torvalds
2005-09-11 19:46 ` Sam Ravnborg
2005-09-11 19:56 ` Linus Torvalds
2005-09-11 21:09 ` Roland Dreier
2005-09-11 21:24 ` Linus Torvalds
2005-09-11 21:33 ` Linus Torvalds
2005-09-12 1:39 ` Junio C Hamano
2005-09-12 2:45 ` Dmitry Torokhov
2005-09-12 18:42 ` Ryan Anderson
2005-09-12 3:39 ` Linus Torvalds
2005-09-13 7:05 ` [PATCH] Define relative .git/objects/info/alternates semantics Junio C Hamano
2005-09-13 16:22 ` Linus Torvalds
2005-09-13 17:30 ` Junio C Hamano
2005-09-13 16:31 ` Daniel Barkalow
2005-09-12 17:10 ` What's up with the GIT archive on www.kernel.org? H. Peter Anvin
2005-09-12 18:22 ` Tony Luck [this message]
2005-09-12 18:37 ` Linus Torvalds
2005-09-11 20:08 ` Junio C Hamano
2005-09-11 22:12 ` Andrew Morton
2005-09-11 22:49 ` Alex Riesen
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=12c511ca050912112266470d8b@mail.gmail.com \
--to=tony.luck@gmail.com \
--cc=git@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=petero2@telia.com \
--cc=rolandd@cisco.com \
--cc=sam@ravnborg.org \
--cc=torvalds@osdl.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.