On Sun, Jan 12, 2014 at 06:03:39PM +0700, Nguyễn Thái Ngọc Duy wrote:

> This patch establishes a connection between a new file watcher daemon
> and git. Each index file may have at most one file watcher attached to
> it. The file watcher maintains a UNIX socket at
> $GIT_DIR/index.watcher. Any process that has write access to $GIT_DIR
> can talk to the file watcher.

IIRC, this is not portable. Some systems (not Linux) will allow anyone
to connect to the socket if it the file is accessible to them (so
anybody with read access to $GIT_DIR can talk to the file watcher). The
usual trick is to put it in a sub-directory that only the connectors can
access (e.g., put it in "$GIT_DIR/watcher/index", and create "watcher"
mode 0700).

-Peff
--
To unsubscribe from this list: send the line "unsubscribe git" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to