git@vger.kernel.org mailing list mirror (one of many)
 help / color / mirror / code / Atom feed
From: Tony Luck <tony.luck@gmail.com>
To: Linus Torvalds <torvalds@osdl.org>
Cc: Roland Dreier <rolandd@cisco.com>,
	Sam Ravnborg <sam@ravnborg.org>,
	Peter Osterlund <petero2@telia.com>,
	Linux Kernel Mailing List <linux-kernel@vger.kernel.org>,
	Git Mailing List <git@vger.kernel.org>
Subject: Re: What's up with the GIT archive on www.kernel.org?
Date: Mon, 12 Sep 2005 11:22:58 -0700	[thread overview]
Message-ID: <12c511ca050912112266470d8b@mail.gmail.com> (raw)
In-Reply-To: <Pine.LNX.4.58.0509111422510.3242@g5.osdl.org>

On 9/11/05, Linus Torvalds <torvalds@osdl.org> wrote:
> There is such an anonymous server, btw: "git-daemon" implements anonymous
> access much more efficient than rsync/http. Sadly, kernel.org still
> doesn't offer it (but it's now used in the wild, ie I've done a couple of
> merges with people running the git daemon).

Should the git daemon take a look at objects/info/alternates to check
that if it exists, it
points to a repository that also has a "git-daemon-export-ok" file?  
I don't see that this
could be used for anything nasty, but it does provide a loophole where
the daemon may
open files outside the initial repository ... so a sanity check seems in order.

-Tony

  parent reply	other threads:[~2005-09-12 18:23 UTC|newest]

Thread overview: 18+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <m3mzmjvbh7.fsf@telia.com>
     [not found] ` <Pine.LNX.4.58.0509110908590.4912@g5.osdl.org>
     [not found]   ` <20050911185711.GA22556@mars.ravnborg.org>
2005-09-11 19:06     ` What's up with the GIT archive on www.kernel.org? Linus Torvalds
2005-09-11 19:46       ` Sam Ravnborg
2005-09-11 19:56         ` Linus Torvalds
2005-09-11 21:09           ` Roland Dreier
2005-09-11 21:24             ` Linus Torvalds
2005-09-11 21:33               ` Linus Torvalds
2005-09-12  1:39                 ` Junio C Hamano
2005-09-12  2:45                   ` Dmitry Torokhov
2005-09-12 18:42                     ` Ryan Anderson
2005-09-12  3:39                   ` Linus Torvalds
2005-09-13  7:05                     ` [PATCH] Define relative .git/objects/info/alternates semantics Junio C Hamano
2005-09-13 16:22                       ` Linus Torvalds
2005-09-13 17:30                         ` Junio C Hamano
2005-09-13 16:31                       ` Daniel Barkalow
2005-09-12 17:10                   ` What's up with the GIT archive on www.kernel.org? H. Peter Anvin
2005-09-12 18:22               ` Tony Luck [this message]
2005-09-12 18:37                 ` Linus Torvalds
2005-09-11 20:08       ` Junio C Hamano

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

  List information: http://vger.kernel.org/majordomo-info.html

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=12c511ca050912112266470d8b@mail.gmail.com \
    --to=tony.luck@gmail.com \
    --cc=git@vger.kernel.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=petero2@telia.com \
    --cc=rolandd@cisco.com \
    --cc=sam@ravnborg.org \
    --cc=torvalds@osdl.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
Code repositories for project(s) associated with this public inbox

	https://80x24.org/mirrors/git.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).