On Aug 27, 2014, at 8:28 AM, Zé <jose.pas...@gmx.com> wrote: > Additionally, to those security-concious people, installing servers on your > workstation just to access local repositories isn't exactly on the top of > best practices. Don't you agree? >
Not at all. Running a "server" which only answers to calls via the loopback interface (or local-domain sockets) is quite common. In fact, look at your machine's own process list. You will find a large number of helper processes that run with UIDs other than as root. The point of separating your repository access to a "server" process allows you to insulate file access permissions to one UID separate from your own (priviledge separation). If all users on a single box access the repository through this "server" process, you create a layer of abstraction and prevent file ownership/permissions flipping and actually _increase_ security and preserve the integrity of your repo.
