[FFmpeg-devel] switching to git - eventually?

Ivo ivop
Tue Jan 22 17:37:40 CET 2008


On Tuesday 22 January 2008 17:07, Attila Kinali wrote:
> On Mon, 7 Jan 2008 00:47:03 +0100
>
> Aurelien Jacobs <aurel at gnuage.org> wrote:
> > Giving all users an ssh account with a restricted shell (which only
> > allows running git) shouldn't be a problem, security-wise.
> > And it should be pretty easy to setup. I don't know git well enough,
> > but Mercurial comes with such a specific restricted shell. It seems
> > gitosis allows something similar but with only one user account.
>
> I'm against this sollution. We had something like this on mphq1
> and it created a whole mess of user and permission management.
>
> If we have something that gives access outside the normal user
> structure, then it should be completely seperated from the
> system users.

Perhaps one could setup a small UML (user mode linux) sandbox and 
debootstrap Debian stable + git on it? UML is fairly straightforward. I 
used to run a genealogy server on it and it worked like a charm.

--Ivo




More information about the ffmpeg-devel mailing list