From: Harald Dunkel <harald.dunkel@aixigo.com>
To: noloader@gmail.com
Cc: Git List <git@vger.kernel.org>
Subject: Re: How to disable safe directories?
Date: Tue, 21 May 2024 16:49:46 +0200 [thread overview]
Message-ID: <98381fb2-5110-4e7f-a504-c5ff75dcd050@aixigo.com> (raw)
In-Reply-To: <d71c7dff-46a7-4ac8-a8c7-ab4985458071@aixigo.com>
On 2024-05-21 16:25:17, Harald Dunkel wrote:
>
> It is possible to disable this feature globally using something
> like
>
> git config --system --add safe.directory /somepath/.git
>
PS: Its obvious that each peer running git can verify only local
directories for dubious access bits. Working with shared remote
repositories you have to consider setting the safe.directory option
on the remote server.
Since CVE-2024-32004 assumes an attacker running its own repository,
I just wonder why he should use the most recent, fixed git version?
Regards
Harri
prev parent reply other threads:[~2024-05-21 14:49 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-05-21 8:39 How to disable safe directories? Jeffrey Walton
2024-05-21 10:42 ` Harald Dunkel
2024-05-21 10:45 ` Jeffrey Walton
2024-05-21 14:25 ` Harald Dunkel
2024-05-21 14:40 ` Jeffrey Walton
2024-05-21 14:49 ` Harald Dunkel [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=98381fb2-5110-4e7f-a504-c5ff75dcd050@aixigo.com \
--to=harald.dunkel@aixigo.com \
--cc=git@vger.kernel.org \
--cc=noloader@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox