Comment 2 for bug 734530

Revision history for this message
Russ Allbery (rra-debian) wrote :

The version of rssh in Ubuntu is from Debian and is already patched for Subversion support, which means that this patch doesn't apply directly to the current package. (Subversion has already stolen the next number.)

The patch would need to update conf_convert.sh as well and modify the postinst script so that existing configuration files are upgraded.

Adding multiple commands for Git isn't horribly appealing. I wonder if there's some way to just have rssh delegate the work of restricting the Git command to git-shell, which already has all of this logic and is separately maintained by Git experts who know what's needed. (Note, for example, that it supports two more commands than this patch.) That would give you the chroot benefits of rssh without making rssh reinvent the logic of git-shell, although you'd still have to detect whether a Git command is being run.

I personally only use rssh without chroot as a restricted shell, so for me git-shell is sufficient and I therefore am not inspired to work personally on this, but I'd consider a patch for the Debian package if it included the above changes.