Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a remote bare Git repository on an Ubuntu server, where the files are owned by the user my_project and the group my_project, with permissions set accordingly. All commiters are themself in the group my_project.

When somebody commit then push from any Ubuntu laptop with the user my_user to the server via SSH, some files in the remote repository are created (updated?) so they now belong to the user and group my_user.

Of course, when somebody else wants to commit, he is now unable to do so because he doesn't have write permissions. I could set permission to 777 but it's not the best option.

Is there any way I can solve this problem while keeping restricted write permissions?

share|improve this question
add comment

2 Answers

up vote 3 down vote accepted

Would the SUID and SGID bits help you? I use a similar mechanism to allow members of the bzr group to commit files to a bazaar central repo and still keep the accessible permissions.

drwsrwsr-x  3 bzr          bzr          4.0K 2010-04-15 17:58 bzr

set with sudo chmod ug+s /home/bzr

/etc/group contains bzr:x:1012:bzr,tom,<and a whole bunch of other usernames>

This seems to work pretty well for us, allowing users in the bzr group to commit files to the central repository.

Setting mode 777 probably isn't ideal, for the obvious security reasons.

If I've missed the point, oops.

share|improve this answer
    
I'll try that :-) ! –  e-satis Apr 19 '10 at 9:24
    
Heh. It was really late at night when i posted this. Couldn't remember if I had or not! –  Tom O'Connor Apr 19 '10 at 9:50
    
That worked. Thks. –  e-satis Apr 19 '10 at 14:19
add comment

Check out the core.sharedRepository config variable in git config --help. Setting it to group might do the trick.

Another option might be to use something like gitosis to manage the repository.

share|improve this answer
    
+1. This approach is more preferrable to me when hosting the remote repo over ssh. Set the config by executing git config core.sharedRepository group on the MyProject.git folder. Also I normally add umask 002 on /etc/profile so new files written automatically has group write permission –  gerrytan Feb 26 '13 at 23:09
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.