Commit graph

26147 commits

Author SHA1 Message Date
14.203.223.70
ff5de4ff57 poll vote (My phone (or MP3 player)) 2015-12-16 07:09:17 +00:00
Joey Hess
1c3b644345
Merge branch 'master' of ssh://git-annex.branchable.com 2015-12-15 20:50:52 -04:00
Joey Hess
25bc6ea6d8
bring back some deleted functions that git-repair uses 2015-12-15 20:42:35 -04:00
Joey Hess
96dd0f4ebe
improve temp dir security
http://bugs.debian.org/807341

* Fix insecure temporary permissions when git-annex repair is used in
  in a corrupted git repository.

  Other calls to withTmpDir didn't leak any potentially private data,
  but repair clones the git repository to a temp directory which is made
  using the user's umask. Thus, it might expose a git repo that is
  otherwise locked down.

* Fix potential denial of service attack when creating temp dirs.

  Since withTmpDir used easily predictable temporary directory names,
  an attacker could create foo.0, foo.1, etc and as long as it managed to
  keep ahead of it, could prevent it from ever returning.

  I'd rate this as a low utility DOS attack. Most attackers in a position
  to do this could just fill up the disk /tmp is on to prevent anything
  from writing temp files. And few parts of git-annex use withTmpDir
  anyway, so DOS potential is quite low.

Examined all callers of withTmpDir and satisfied myself that
switching to mkdtmp and so getting a mode 700 temp dir wouldn't break any
of them.

Note that withTmpDirIn continues to not force temp dir to 700.
But it's only used for temp directories inside .git/annex/wherever/
so that is not a problem.

Also re-audited all other uses of temp files and dirs in git-annex.
2015-12-15 20:21:48 -04:00
wsha.code+ga@b38779424f41c5701bbe5937340be43ff1474b2d
555f5ae302 removed 2015-12-14 12:04:46 +00:00
wsha.code+ga@b38779424f41c5701bbe5937340be43ff1474b2d
eb822fbd1c Added a comment 2015-12-14 12:03:58 +00:00
wsha.code+ga@b38779424f41c5701bbe5937340be43ff1474b2d
9051166774 Added a comment 2015-12-14 12:03:23 +00:00
https://me.yahoo.com/a/ZF7p46cPmpWtb9zvA8iTitPmiQ--#eb014
9690904b45 Added a comment: It worked 2015-12-14 04:46:46 +00:00
https://me.yahoo.com/a/ZF7p46cPmpWtb9zvA8iTitPmiQ--#eb014
367791c827 Added a comment: I'm also having this issue 2015-12-14 03:17:58 +00:00
yminus
97bb479165 Added a comment 2015-12-13 22:55:16 +00:00
scorchgeek
d998d20364 Added a comment: Indeed 2015-12-13 22:30:47 +00:00
basak
4c8fdaa008 Added a comment 2015-12-13 21:35:59 +00:00
joakim.hovlandsvag@ad788ffa13d1ccbf03f2c485653900f8baa33950
ea01310d98 Added a comment: Repairing ignores disk space issues too 2015-12-13 09:13:25 +00:00
joakim.hovlandsvag@ad788ffa13d1ccbf03f2c485653900f8baa33950
7bca9bc5b1 2015-12-13 07:42:22 +00:00
scorchgeek
928de5e3ad create page 2015-12-12 22:44:00 +00:00
Joey Hess
04e00146ed
Debian: Build depend on concurrent-output.
In unstable now.
2015-12-12 12:19:31 -04:00
wsha.code+ga@b38779424f41c5701bbe5937340be43ff1474b2d
4183f0e1dc Added a comment 2015-12-12 10:42:47 +00:00
wsha.code+ga@b38779424f41c5701bbe5937340be43ff1474b2d
68e05915ed Added a comment 2015-12-12 05:28:51 +00:00
https://openid.stackexchange.com/user/27ceb3c5-0762-42b8-8f8a-ed21c284748f
c475d71f9e Added a comment 2015-12-11 22:58:22 +00:00
http://www.ryantm.com/
5e01b40151 2 more data -> 2 more days 2015-12-11 21:04:54 +00:00
Joey Hess
3e54d95aa3
devblog 2015-12-11 16:24:21 -04:00
Joey Hess
abd66c7089
fsck: Failed to honor annex.diskreserve when checking a remote. 2015-12-11 13:50:27 -04:00
Joey Hess
4407df6314
Merge branch 'master' of ssh://git-annex.branchable.com 2015-12-11 12:15:29 -04:00
Joey Hess
0f126440ca
webdav: When testing the WebDAV server, send a file with content. The empty file it was sending tickled bugs in some php WebDAV server. 2015-12-11 12:13:20 -04:00
Joey Hess
48bc7a9057
comment 2015-12-11 11:27:33 -04:00
Joey Hess
4ea479f776
comment 2015-12-11 11:23:57 -04:00
Joey Hess
9e34ed66f7
comment 2015-12-11 11:20:35 -04:00
Joey Hess
b12fc8cf1b
add Blackblaze B2 extranal special remote to the list 2015-12-11 11:06:02 -04:00
Joey Hess
bbfd454edc
comment 2015-12-11 11:04:48 -04:00
Joey Hess
eee5bede24
clean up 2015-12-11 11:03:22 -04:00
yminus
3e59d498c4 Added a comment 2015-12-10 22:25:26 +00:00
http://joeyh.name/
a6dec1c9db Added a comment 2015-12-10 18:58:46 +00:00
Joey Hess
b376047cc3
comment 2015-12-10 12:31:26 -04:00
fbicknel@01ede624a1a56b3998b823e9b60da0ff81cccb16
4b31d9c404 Added a comment: Complete removal 2015-12-10 16:16:43 +00:00
Joey Hess
a0528db092
Add S3 features to git-annex version output. 2015-12-10 11:42:49 -04:00
Joey Hess
d283fa4fe9
comment 2015-12-10 11:22:28 -04:00
Joey Hess
79dd48546a
response 2015-12-10 11:20:01 -04:00
Joey Hess
2f25b8360f
response 2015-12-10 11:15:06 -04:00
https://openid.stackexchange.com/user/27ceb3c5-0762-42b8-8f8a-ed21c284748f
7a03f55aa0 Added a comment: The downside 2015-12-10 03:45:09 +00:00
https://openid.stackexchange.com/user/3ee5cf54-f022-4a71-8666-3c2b5ee231dd
b9312e3554 2015-12-09 23:01:21 +00:00
Joey Hess
d0449ac1e4
Merge branch 'master' of ssh://git-annex.branchable.com 2015-12-09 18:14:19 -04:00
Joey Hess
3964d3388b
devblog 2015-12-09 18:13:31 -04:00
openmedi
ef664f089f Added a comment 2015-12-09 20:18:48 +00:00
https://me.yahoo.com/a/EbvxpTI_xP9Aod7Mg4cwGhgjrCrdM5s-#7c0f4
5ef6ed8b9a Added a comment: anyone saw/worked on backend for watchdox service? (not free one but needed :-/) 2015-12-08 19:45:03 +00:00
Joey Hess
e1961bf806
add news item for git-annex 5.20151208 2015-12-08 11:28:19 -04:00
Joey Hess
e74e612945
prep release 2015-12-08 11:14:28 -04:00
Joey Hess
e276f4abb2
response 2015-12-08 11:13:55 -04:00
ben
4f3dd0b7b2 Added a comment: Problems initializing glacier remote 2015-12-08 10:39:30 +00:00
wsha.code+ga@b38779424f41c5701bbe5937340be43ff1474b2d
a690782429 I started using a repo on S3, so that partially answered my question about how files are stored on S3. 2015-12-08 10:02:06 +00:00
wsha.code+ga@b38779424f41c5701bbe5937340be43ff1474b2d
c92917d24a Added a comment 2015-12-08 09:44:49 +00:00