New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unwanted access to gitolite-admin repository #230

Closed
lschoepps opened this Issue Jul 8, 2014 · 1 comment

Comments

Projects
None yet
2 participants
@lschoepps

lschoepps commented Jul 8, 2014

Hi,

I think there is a security issue since every user with sufficient rights can create a project named 'gitolite-admin' and create a main git repository which will give him access to the gitolite-admin repository (which let him manage rights of every repositories).

I think this issue exists at least since the commit 098275c but I don't know if it was possible before.

Best regards,

Ludovic Schoepps.

@n-rodriguez

This comment has been minimized.

Show comment
Hide comment
@n-rodriguez

n-rodriguez Jul 8, 2014

Member

Hi there! Thanks for your feedback!

I think this issue exists at least since the commit 098275c but I don't know if it was possible before.

I think this has always been possible.

Member

n-rodriguez commented Jul 8, 2014

Hi there! Thanks for your feedback!

I think this issue exists at least since the commit 098275c but I don't know if it was possible before.

I think this has always been possible.

@n-rodriguez n-rodriguez self-assigned this Jul 14, 2014

@n-rodriguez n-rodriguez added the bug label Jul 14, 2014

n-rodriguez added a commit that referenced this issue Jul 14, 2014

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment