Re: [fossil-users] Fossil clone over SSH

2014-08-19 Thread Andy Bradford
Thus said Abilio Marques on Sat, 16 Aug 2014 12:14:09 -0430: amarques@laptop-01 ~/tmp/resume $ fossil clone ssh://abiliojr@raspberry1/.fossilrepos/resume.fossil .resume.fossil abiliojr@raspberry1's password: Round-trips: 2 Artifacts sent: 0 received: 0 Error: not authorized to clone

Re: [fossil-users] Fossil clone over SSH

2014-08-16 Thread Stephan Beal
On Fri, Aug 15, 2014 at 3:14 PM, Abilio Marques amarq...@smartappsla.com wrote: The extra mile question is: is there any security risk involved with giving 'nobody' the chance to clone? Lets say I keep a fossil server running all the time too. I believe there is not, but maybe I'm mistaken...

Re: [fossil-users] Fossil clone over SSH

2014-08-16 Thread Abilio Marques
I'm using (as you will see, fossil 1.29) I have no permissions enabled for nobody. Next is a transcript of a test: amarques@laptop-01 ~/tmp/resume $ fossil clone ssh://abiliojr@raspberry1/.fossilrepos/resume.fossil .resume.fossil abiliojr@raspberry1's password: Round-trips: 2 Artifacts sent: 0

Re: [fossil-users] Fossil clone over SSH

2014-08-16 Thread Andy Bradford
Thus said Abilio Marques on Fri, 15 Aug 2014 08:44:46 -0430: Cloning over ssh seems to be impossible if the user nobody doesn't have cloning permissions. For me it seems ok, as cloning over ssh still requires username and password or a valid public key, so not everyone can get

Re: [fossil-users] Fossil clone over SSH

2014-08-16 Thread Andy Bradford
Thus said Abilio Marques on Sat, 16 Aug 2014 12:14:09 -0430: amarques@laptop-01 ~/tmp/resume $ fossil clone ssh://abiliojr@raspberry1/.fossilrepos/resume.fossil .resume.fossil abiliojr@raspberry1's password: Round-trips: 2 Artifacts sent: 0 received: 0 Error: not authorized to clone

[fossil-users] Fossil clone over SSH

2014-08-15 Thread Abilio Marques
Hi, This is a stupid question, I've seen it asked several times, but I'm trying my own version of the question here: Cloning over ssh seems to be impossible if the user nobody doesn't have cloning permissions. For me it seems ok, as cloning over ssh still requires username and password or a

Re: [fossil-users] Fossil clone over SSH

2014-08-15 Thread Warren Young
On 8/15/2014 07:14, Abilio Marques wrote: Cloning over ssh seems to be impossible if the user nobody doesn't have cloning permissions. I successfully cloned a repo over SSH where Nobody only has read wiki and read ticket direct permissions, and inherits no other privileges. I did this with