Re: [PATCHv4 2/2] Helper script to interface to gitolite

Wed, 31 Oct 2012 21:20:59 -0700 

1. If PATH is controlled by an attacker, it's already game over, regardless
of this script.
2. Using `which` doesn't make sense, since in a shell script you just call
it by the name, and then it searches path.
3. Gitolite is frequently installed just in a home directory, in the case
of shared hosting, not globally in /usr or /usr/local.
4. So, the best way is just to call gitolite by typing "gitolite"
_______________________________________________
cgit mailing list
[email protected]
http://hjemli.net/mailman/listinfo/cgit

Reply via email to