From: Francois Beutin <beutinf@ensimag.grenoble-inp.fr>
To: git@vger.kernel.org
Cc: matthieu.moy@grenoble-inp.fr,
simon.rabourg@ensimag.grenoble-inp.fr,
wiliam.duclot@ensimag.grenoble-inp.fr,
antoine.queru@ensimag.grenoble-inp.fr
Subject: [Opinion gathering] Git remote whitelist/blacklist
Date: Fri, 20 May 2016 16:21:44 +0200 (CEST) [thread overview]
Message-ID: <584027154.5608416.1463754104066.JavaMail.zimbra@ensimag.grenoble-inp.fr> (raw)
In-Reply-To: <1040142021.5607762.1463753271105.JavaMail.zimbra@ensimag.grenoble-inp.fr>
Hi everyone,
We (Ensimag students) plan to implement the
"remote whitelist/blacklist" feature described in the SoC 2016 ideas,
but first I would like to be sure we agree on what exactly this
feature would be, and that the community sees an interest in it.
The general idea is to add a way to prevent accidental push to the
wrong repository, we see two ways to do it:
First solution:
- a whitelist: Git will accept a push to a repository in it
- a blacklist: Git will refuse a push to a repository in it
- a default policy
Second solution:
- a default policy
- a list of repository not following the default policy
The new options in config if we implement the first solution:
[remote]
# List of repository that will be allowed/denied with
# a whitelist/blacklist
whitelisted = "http://git-hosting.org"
blacklisted = "http://git-hosting2.org"
# What is displayed when the user attempts a push on an
# unauthorised repository? (this option overwrites
# the default message)
denymessage = "message"
# What git should do if the user attempts a push on an
# unauthorised repository (reject or warn and
# ask the user)?
denypolicy = reject(default)/warning
# How should unknown repositories be treated?
defaultpolicy = allow(default)/deny
Some concrete usage example:
- A beginner is working on company code, to prevent him from
accidentally pushing the code on a public repository, the
company (or him) can do:
git config --global remote.defaultpolicy "deny"
git config --global remote.denymessage "Not the company's server!"
git config --global remote.denypolicy "reject"
git config --global remote.whitelisted "http://company-server.com"
- A regular git user fears that he might accidentally push sensible
code to a public repository he often uses for free-time
projects, he can do:
git config remote.defaultpolicy "allow" #not really needed
git config remote.denymessage "Are you sure it is the good server?"
git config remote.denypolicy "warning"
git config remote.blacklisted "http://github/personnalproject"
We would like to gather opinions about this before starting to
implement it, is there any controversy? Do you prefer the
first or second solution (or none)? Do you find the option's
names accurate?
next parent reply other threads:[~2016-05-20 14:14 UTC|newest]
Thread overview: 15+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <1040142021.5607762.1463753271105.JavaMail.zimbra@ensimag.grenoble-inp.fr>
2016-05-20 14:21 ` Francois Beutin [this message]
2016-05-20 14:22 ` [Opinion gathering] Git remote whitelist/blacklist Randall S. Becker
2016-05-23 12:51 ` Francois Beutin
2016-05-24 10:12 ` Francois Beutin
2016-05-24 10:55 ` Lars Schneider
2016-05-24 12:55 ` Matthieu Moy
2016-05-24 16:07 ` Junio C Hamano
2016-05-24 16:16 ` Randall S. Becker
2016-05-24 16:20 ` Junio C Hamano
2016-05-24 19:25 ` Lars Schneider
2016-05-24 21:02 ` Randall S. Becker
2016-05-24 19:11 ` Lars Schneider
2016-05-24 19:22 ` Matthieu Moy
2016-05-25 22:52 ` Jeff King
2016-05-24 22:24 ` Aaron Schrab
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: http://vger.kernel.org/majordomo-info.html
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=584027154.5608416.1463754104066.JavaMail.zimbra@ensimag.grenoble-inp.fr \
--to=beutinf@ensimag.grenoble-inp.fr \
--cc=antoine.queru@ensimag.grenoble-inp.fr \
--cc=git@vger.kernel.org \
--cc=matthieu.moy@grenoble-inp.fr \
--cc=simon.rabourg@ensimag.grenoble-inp.fr \
--cc=wiliam.duclot@ensimag.grenoble-inp.fr \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://80x24.org/mirrors/git.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).