This is by design. Reading Mercurial config files owned by
random/unknown/untrusted users would be a security risk, because those
untrusted users can install malicious hooks that run with your
privileges on certain Mercurial operations (e.g. commit).

You can add to the set of trusted users with configuration: add a
section like

  [trusted]
  users = root

and this problem will go away. Keep in mind, though, that this exposes
you to the risk of attackers putting a malicious hook into your .hg/hgrc
file!

See the hgrc(5) man page for details, specifically under "trusted".


** Changed in: mercurial (Ubuntu)
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/847363

Title:
  .hg/hgrc are not read on non-unix filesystems

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mercurial/+bug/847363/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to