disk space management

Colin Walters walters at verbum.org
Mon Jun 20 13:50:22 UTC 2016


On Mon, Jun 20, 2016, at 04:26 AM, Alexander Larsson wrote:
> but "bare"
> repos store permissions "as-is", which means that pulling e.g. a setuid
> binary will store a setuid binary object in the repo. This isn't great
> unless you fully trust the remotes you use and is the reason i moved to
> a bare-user repo.

We could have something like:

allow-privileged=false

in a remote config which would cause pulls that include setuid (and
any xattrs in the system. namespace) to fail.

See also:
https://bugzilla.gnome.org/show_bug.cgi?id=722984



More information about the xdg-app mailing list