Sylvain Beucler wrote: > On Sat, Oct 16, 2010 at 06:25:51PM +0200, Eli Zaretskii wrote: >> > From: Jim Meyering <[email protected]> >> > Cc: [email protected], [email protected] >> > Date: Sat, 16 Oct 2010 16:31:32 +0200 >> > >> > Eli Zaretskii wrote: >> > >> From: Jim Meyering <[email protected]> >> > >> Date: Sat, 16 Oct 2010 15:53:27 +0200 >> > >> Cc: Andreas Schwab <[email protected]> >> > >> >> > >> adduser --system --home /var/lib/bzr2git bzr2git >> > >> >> > >> [that new user will also be added to the "emacs" group] >> > > >> > > Please add that user with the minimal privileges needed for this job, >> > > not the default privileges granted to humans. >> > >> > I have a hard time interpreting the above in any way other than "please >> > be careful about security," which would be presumptuous and offensive. >> > Surely you don't mean that, so it must be something else. >> >> I'm not sure how to respond. Maybe I shouldn't. I'm sorry I offended >> you. > > Alternatively maybe you can grant privileges to this system user on > the git repo only (not on the bzr one), using setfacl.
Good idea. If that works out, this user wouldn't even need to be in the emacs group. Hmm... now I owe an apology. Sorry, Eli.
