1

I want to secure some git repositories and using only users and groups is not sufficient.

I'm thinking about using ACLs to control the access.

The access to the repositories is local, the users have shell access.

1

I was going to suggest looking at the options provided by git init --shared=, but you preempted that by saying "using only users and groups is not sufficient." So I think your options are:

  • ACLs, as suggested by everyone.
  • removing local access, and using gitosis to control access via SSH keys.
| improve this answer | |
1

You should check out AIX acls.

| improve this answer | |
0

Please be more specific. How are the users getting to the repositories as it is? Why are users and groups insufficient?

| improve this answer | |
  • there are more users in the group than users needing the repository access and I don't have control of how the groups are created or asigned. and the users access the repositories in the same machine – Aragorn Jul 22 '09 at 14:37
0

Reflecting the comment on the previous, ACLs might indeed be the way to go. It's fairly easy either to grant users access individually, or to give the group access and block certain users. The tutorial here may be useful.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.