From: Richard Hartmann Date: Tue, 21 Jan 2014 14:56:15 +0000 (+0100) Subject: vcsh: Initialize repos with --shared=0600 X-Git-Url: https://git.madduck.net/code/vcsh.git/commitdiff_plain/e220a617bcd54e5fd324e21e418fff7c3c3f170a?hp=--cc vcsh: Initialize repos with --shared=0600 Configurations and other dotdir content may be highly confidential. Ensure we're not leaking/exposing information by making vcsh repositories user-accessible, only. Thanks to Enrico Zini for realizing this was a problem. --- e220a617bcd54e5fd324e21e418fff7c3c3f170a diff --git a/vcsh b/vcsh index 5d502e7..993c8ed 100755 --- a/vcsh +++ b/vcsh @@ -221,7 +221,7 @@ init() { [ ! -e "$GIT_DIR" ] || fatal "'$GIT_DIR' exists" 10 mkdir -p "$VCSH_BASE" || fatal "could not create '$VCSH_BASE'" 50 cd "$VCSH_BASE" || fatal "could not enter '$VCSH_BASE'" 11 - git init + git init --shared=0600 upgrade hook post-init }