From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mike Hommey Subject: Re: is gitosis secure? Date: Mon, 15 Dec 2008 09:35:45 +0100 Organization: glandium.org Message-ID: <20081215083545.GA3666@glandium.org> References: <87hc58hwmi.fsf@hades.wkstn.nix> <4944D4F7.7050501@siamect.com> <4944E7E1.2030907@siamect.com> <20081215071737.GA32387@glandium.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: martin , git@vger.kernel.org To: david@lang.hm X-From: git-owner@vger.kernel.org Mon Dec 15 09:34:22 2008 Return-path: Envelope-to: gcvg-git-2@gmane.org Received: from vger.kernel.org ([209.132.176.167]) by lo.gmane.org with esmtp (Exim 4.50) id 1LC8uD-0006Qs-4S for gcvg-git-2@gmane.org; Mon, 15 Dec 2008 09:34:21 +0100 Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752272AbYLOIdE (ORCPT ); Mon, 15 Dec 2008 03:33:04 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1752248AbYLOIdD (ORCPT ); Mon, 15 Dec 2008 03:33:03 -0500 Received: from vuizook.err.no ([194.24.252.247]:51870 "EHLO vuizook.err.no" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752272AbYLOIdB (ORCPT ); Mon, 15 Dec 2008 03:33:01 -0500 Received: from cha92-13-88-165-248-19.fbx.proxad.net ([88.165.248.19] helo=jigen) by vuizook.err.no with esmtps (TLS-1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.69) (envelope-from ) id 1LC8sm-000360-G7; Mon, 15 Dec 2008 09:32:55 +0100 Received: from mh by jigen with local (Exim 4.69) (envelope-from ) id 1LC8vZ-0000xr-1q; Mon, 15 Dec 2008 09:35:45 +0100 Content-Disposition: inline In-Reply-To: X-GPG-Fingerprint: A479 A824 265C B2A5 FC54 8D1E DE4B DA2C 54FD 2A58 User-Agent: Mutt/1.5.18 (2008-05-17) X-Spam-Status: (score 0.1): No, score=0.1 required=5.0 tests=RDNS_DYNAMIC autolearn=disabled version=3.2.4 Sender: git-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: git@vger.kernel.org Archived-At: On Mon, Dec 15, 2008 at 12:25:53AM -0800, david@lang.hm wrote: > On Mon, 15 Dec 2008, Mike Hommey wrote: > >> On Sun, Dec 14, 2008 at 05:00:14PM -0800, david@lang.hm wrote: >>> 1. if you are running multiple different applications that all want to be >>> exposed via port 22 (like git for 'git push') then you may need to expose >>> numerous machines. tools that use SSH don't tend to have the ability to >>> use a gateway box before they start executing commands, they assume that >>> you will SSH directly into the destination box. >> >> But ssh itself allows you to do proxying. See ProxyCommand in >> ssh_config's manpage. > > I was not aware of that option, but it looks like it's designed to be one > setting for all your ssh communications, so unless you always use the > same gateway box to get to your destination you would need to tweak your > ssh config for each different thing that you are doing. Take a look at Host in the same man page. Mike