git-annex/CmdLine
Joey Hess 9a8391078a
git-annex-shell: block relay requests
connRepo is only used when relaying git upload-pack and receive-pack.
That's only supposed to be used when git-annex-remotedaemon is serving
git-remote-tor-annex connections over tor. But, it was always set, and
so could be used in other places possibly.

Fixed by making connRepo optional in the P2P protocol interface.

In Command.EnableTor, it's not needed, because it only speaks the
protocol in order to check that it's able to connect back to itself via
the hidden service. So changed that to pass Nothing rather than the git
repo.

In Remote.Helper.Ssh, it's connecting to git-annex-shell p2pstdio,
so is making the requests, so will never need connRepo.

In git-annex-shell p2pstdio, it was accepting git upload-pack and
receive-pack requests over the P2P protocol, even though nothing sent
them. This is arguably a security hole, particularly if the user has
set environment variables like GIT_ANNEX_SHELL_LIMITED to prevent
git push/pull via git-annex-shell.
2024-06-10 14:16:27 -04:00
..
GitAnnex Change --copies' meta parameter to NUMBER 2024-04-30 15:16:22 -04:00
GitAnnexShell uninit: Support --json and --json-error-messages 2023-05-11 13:43:02 -04:00
Action.hs Fix display when run with -J1 2023-06-15 10:07:54 -04:00
AnnexSetter.hs remove --backend from global options 2022-06-29 13:33:25 -04:00
Batch.hs log migration trees to git-annex branch 2023-12-06 15:40:03 -04:00
GitAnnex.hs add reregisterurl command 2024-03-05 15:06:14 -04:00
GitAnnexShell.hs Override safe.bareRepository for git remotes 2023-09-07 14:56:26 -04:00
GitRemoteAnnex.hs git-remote-annex: Support urls like annex::https://example.com/foo-repo 2024-05-30 12:24:16 -04:00
GitRemoteTorAnnex.hs git-annex-shell: block relay requests 2024-06-10 14:16:27 -04:00
Option.hs initial implementation of --explain 2023-07-25 16:52:57 -04:00
Seek.hs add startAction parameter for KeySha 2023-12-06 13:28:02 -04:00
Usage.hs add FIELD?=GLOB to git-annex view usage 2023-02-07 18:09:10 -04:00