Re: GIT Hooks and security

2013-10-26 Thread Ondřej Bílka
> 2013/10/26 Bryan Turner : > > No, the .git/hooks directory in your clone is created from your local > > templates, installed with your Git distribution, not the remote hooks. > > On Linux distributions, these templates are often in someplace like > > /usr/share/git-core/templates (for normal pack

Re: GIT Hooks and security

2013-10-26 Thread Olivier Revollat
Very helpful :) thanks ! 2013/10/26 Bryan Turner : > No, the .git/hooks directory in your clone is created from your local > templates, installed with your Git distribution, not the remote hooks. > On Linux distributions, these templates are often in someplace like > /usr/share/git-core/templates

Re: GIT Hooks and security

2013-10-25 Thread Bryan Turner
No, the .git/hooks directory in your clone is created from your local templates, installed with your Git distribution, not the remote hooks. On Linux distributions, these templates are often in someplace like /usr/share/git-core/templates (for normal packages), and on Windows with msysgit they are

Re: GIT Hooks and security

2013-10-25 Thread Olivier Revollat
But when someone do a "clone" he don't have .git/hooks directory downloaded to his local computer ? I thought so ... 2013/10/26 Junio C Hamano : > Olivier Revollat writes: > >> I was wondering : What if I had a "malicious" GIT repository who can >> "inject" code via git hooks mechanism : someone

Re: GIT Hooks and security

2013-10-25 Thread Junio C Hamano
Olivier Revollat writes: > I was wondering : What if I had a "malicious" GIT repository who can > "inject" code via git hooks mechanism : someone clone my repo and > some malicious code is executed when a certain GIT hook is triggered > (for example on commit ("prepare-commit-msg' hook)) In tha

GIT Hooks and security

2013-10-25 Thread Olivier Revollat
I was wondering : What if I had a "malicious" GIT repository who can "inject" code via git hooks mechanism : someone clone my repo and some malicious code is executed when a certain GIT hook is triggered (for example on commit ("prepare-commit-msg' hook)) ? What if I email /etc/passwd for exemple