mirrors/git-annex
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

rename config to annex.security.allowed-compute-programs

Browse source 
And require for enable as well as autoenable.

It seemed asking for trouble for `git-annex enable foo` to use whatever
compute program is stored in the git config, without verifying that the
user wants that program to be used.

Note that it would be good to allow `git-annex enable foo program=...`
to be used without the program being in the git config. Not implemented yet
though.
This commit is contained in:
Joey Hess 2025-03-03 16:07:04 -04:00
parent f32d2aecce
commit 52f51d065a
No known key found for this signature in database
GPG key ID: DB12DB0FF05F8F38
5 changed files with 24 additions and 24 deletions
Download patch file Download diff file Expand all files Collapse all files

4
doc/git-annex.mdwn
View file

@ -2201,12 +2201,12 @@ Remotes are configured using these settings in `.git/config`.
Per-remote configuration of annex.security.allow-unverified-downloads.
* `annex.security.autoenable-compute-programs`
* `annex.security.allowed-compute-programs`
This is a space separated list of compute programs eg
"git-annex-compute-foo git-annex-compute-bar". Listing a compute
program here allows compute special remotes that use that program to be
autoenabled.
enabled by `git-annex enableremote` or autoenabled.
# CONFIGURATION OF ASSISTANT

9
doc/special_remotes/compute.mdwn
View file

@ -15,11 +15,10 @@ program to use to compute the contents of annexed files. It must start with
"git-annex-compute-". The program needs to be installed somewhere in the
`PATH`.
The `autoenable` parameter can be set to "true" like with other special
remotes to make git-annex automatically enable this special remote when
run in a new clone of the repository. However, for security, autoenabling
is only done when the git config `annex.security.autoenable-compute-programs`
includes the name of the compute program.
Any program can be passed to `git-annex initremote`. However, when enabling
a compute special remote later with `git-annex enableremote` or due to
"autoenable=true", the program must be listed in the git config
`annex.security.allowed-compute-programs`.
All other "field=value" parameters passed to `initremote` will be passed
to the program when running [[git-annex-addcomputed]]. Note that when the