diff options
| author | http://smcv.pseudorandom.co.uk/ <smcv@web> | 2012-12-21 07:02:19 -0400 |
|---|---|---|
| committer | admin <admin@branchable.com> | 2012-12-21 07:02:19 -0400 |
| commit | 080a52977c9ca7964d075bb2e2388bdc006780ea (patch) | |
| tree | 1f95d43d678fbbe3cf16f7d9547a0914a405a574 /doc | |
| parent | 10556fa8d02f7510e3a68d049e4357bf324e1e77 (diff) | |
| download | ikiwiki-080a52977c9ca7964d075bb2e2388bdc006780ea.tar ikiwiki-080a52977c9ca7964d075bb2e2388bdc006780ea.tar.gz | |
Added a comment
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/forum/ikiwiki_and_big_files/comment_2_2d996f1124aedc10f345139c3d8b11df._comment | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/doc/forum/ikiwiki_and_big_files/comment_2_2d996f1124aedc10f345139c3d8b11df._comment b/doc/forum/ikiwiki_and_big_files/comment_2_2d996f1124aedc10f345139c3d8b11df._comment new file mode 100644 index 000000000..6a11d9ae2 --- /dev/null +++ b/doc/forum/ikiwiki_and_big_files/comment_2_2d996f1124aedc10f345139c3d8b11df._comment @@ -0,0 +1,19 @@ +[[!comment format=mdwn + username="http://smcv.pseudorandom.co.uk/" + nickname="smcv" + subject="comment 2" + date="2012-12-21T11:02:19Z" + content=""" +Unfortunately, ikiwiki [[doesn't follow symlinks for security +reasons|security]] - if it did, anyone who can commit to the wiki +repository could publish any file readable by the user who runs ikiwiki, +including secrets like `~/.gnupg/secring.gpg` or +`~/.ssh/identity`. + +git-annex relies on symlinks, so that restriction breaks it. +It would be great to be able to use some restricted, safe subset +of symlinks (\"relative symlinks that point into `.git/annex`\" would +be enough to support git-annex), and I've looked into it in the past. +My [[plugins/contrib/album]] plugin would benefit from being able +to annex the actual photos, for instance. +"""]] |