Re: [fossil-users] Fossil clone over SSH

2014-08-19 Thread Andy Bradford
Thus said Abilio Marques on Sat, 16 Aug 2014 12:14:09 -0430: > amarques@laptop-01 ~/tmp/resume $ fossil clone > ssh://abiliojr@raspberry1/.fossilrepos/resume.fossil > .resume.fossil > abiliojr@raspberry1's password: > Round-trips: 2 Artifacts sent: 0 received: 0 > Error: not authorized to clone

Re: [fossil-users] Fossil clone over SSH

2014-08-16 Thread Andy Bradford
Thus said Abilio Marques on Sat, 16 Aug 2014 12:14:09 -0430: > amarques@laptop-01 ~/tmp/resume $ fossil clone > ssh://abiliojr@raspberry1/.fossilrepos/resume.fossil > .resume.fossil > abiliojr@raspberry1's password: > Round-trips: 2 Artifacts sent: 0 received: 0 > Error: not authorized to clone

Re: [fossil-users] Fossil clone over SSH

2014-08-16 Thread Andy Bradford
Thus said Abilio Marques on Fri, 15 Aug 2014 08:44:46 -0430: > Cloning over ssh seems to be impossible if the user nobody doesn't > have cloning permissions. For me it seems ok, as cloning over ssh > still requires username and password or a valid public key, so not > everyone can get

Re: [fossil-users] Fossil clone over SSH

2014-08-16 Thread Abilio Marques
I'm using (as you will see, fossil 1.29) I have no permissions enabled for nobody. Next is a transcript of a test: amarques@laptop-01 ~/tmp/resume $ fossil clone ssh://abiliojr@raspberry1/.fossilrepos/resume.fossil .resume.fossil abiliojr@raspberry1's password: Round-trips: 2 Artifacts sent: 0

Re: [fossil-users] Fossil clone over SSH

2014-08-16 Thread Stephan Beal
On Fri, Aug 15, 2014 at 3:14 PM, Abilio Marques wrote: > The extra mile question is: is there any security risk involved with > giving 'nobody' the chance to clone? Lets say I keep a fossil server > running all the time too. I believe there is not, but maybe I'm mistaken... > i can't speak for

Re: [fossil-users] Fossil clone over SSH

2014-08-15 Thread Warren Young
On 8/15/2014 07:14, Abilio Marques wrote: Cloning over ssh seems to be impossible if the user nobody doesn't have cloning permissions. I successfully cloned a repo over SSH where Nobody only has "read wiki" and "read ticket" direct permissions, and inherits no other privileges. I did this w

[fossil-users] Fossil clone over SSH

2014-08-15 Thread Abilio Marques
Hi, This is a stupid question, I've seen it asked several times, but I'm trying my own version of the question here: Cloning over ssh seems to be impossible if the user nobody doesn't have cloning permissions. For me it seems ok, as cloning over ssh still requires username and password or a valid