Repository navigation

Commit 30268bc

committed

Use git-shell in 'gitreceive run'.

gitreceive currently allows users to execute arbitrary commands on the system eg: ssh git@whatever /bin/bash This patch uses git-shell to evaluate the command sent by remote users, restricting command execution to git-related programs.

1 parent 783af2e commit 30268bcCopy full SHA for 30268bc

1 file changed

gitreceive

`‎gitreceive‎`

-Original file line number
+Diff line change
 cat | $SELF hook
 EOF
     chmod +x $PRERECEIVE_HOOK
 -    eval $SSH_ORIGINAL_COMMAND
 +    eval "git-shell -c \"$SSH_ORIGINAL_COMMAND\""
     ;;
   hook)

Comments

(0)