[Secure-testing-team] Bug#727122: [gitolite3] Do not create a test-repo with @all RW
Bastien ROUCARIÈS
bastien.roucaries at u-cergy.fr
Tue Oct 22 13:01:59 UTC 2013
Package: gitolite3
Severity: grave
Tags: security
X-Debbugs-CC: secure-testing-team at lists.alioth.debian.org
By default gitolite3 install create a test repo (see gitolite.conf)
repo testing:
RW+ = @all
This repositionnery is writtable by every one and could lead to distant dos
(disk full).
Bastien
More information about the Secure-testing-team
mailing list