git.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* chrooting git daemon?
@ 2009-06-11 15:30 Jan Klod
  2009-06-11 21:27 ` Klas Lindberg
  0 siblings, 1 reply; 2+ messages in thread
From: Jan Klod @ 2009-06-11 15:30 UTC (permalink / raw)
  To: git

Hello,
please, is that hard / complicated to run git daemon in chroot and what are 
the steps to do it best?
Do you consider it useless precaution there? 

Jan

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: chrooting git daemon?
  2009-06-11 15:30 chrooting git daemon? Jan Klod
@ 2009-06-11 21:27 ` Klas Lindberg
  0 siblings, 0 replies; 2+ messages in thread
From: Klas Lindberg @ 2009-06-11 21:27 UTC (permalink / raw)
  To: Jan Klod; +Cc: git

11 jun 2009 kl. 17.30 skrev Jan Klod:

> Hello,
> please, is that hard / complicated to run git daemon in chroot and  
> what are
> the steps to do it best?
> Do you consider it useless precaution there?

You do know that chroot is not a security tool, right? If you do want  
security measures, I'd suggest setting up SSH accounts with the login  
shell set to git-shell. The main difference is that you can have any  
number of trees served from the same machine without handling them all  
by the same service instance. If you wanted to accomplish the same  
with git-daemon, you'd have to let all of them listen to different  
ports. At least that's how I understand it.

BR / Klas

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2009-06-11 21:27 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2009-06-11 15:30 chrooting git daemon? Jan Klod
2009-06-11 21:27 ` Klas Lindberg

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).