StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

POGit post-receive hook to update a local clone owned by a different user
text
Body
copied!<p>I'm trying to set up a git post-receive hook such that when a commit is received, another clone of the repository on the machine gets updated (i.e. does a <code>git pull origin master</code>). I'm using gitosis to serve the repository and as such I believe a post-receive hook will be run as the <code>gitosis</code> user, whereas the repository I want to update on a receive is owned by <code>www-data</code>. How should I go about doing this?</p> <p>I've heard about <code>setuid</code> scripts but I'm not sure whether this might be a security risk? And if it's not a security risk, how would I go about doing this? I'm guessing I would do something like make the script owned by <code>www-data</code> and make it world-executable and enable the setuid bit? I guess this script would be pretty much harmless since all it does is update the repository, but I want to be sure. Thanks!</p> <p>Edit: Is there any way to do this using <code>sudo</code>? Would that be more secure than <code>setuid</code>? I mean, I don't think there's much issue with <code>setuid</code> if the user isn't root, but all the same it seems like I'd have to jump through a few hoops to get a <code>setuid</code> script to run.</p> <p>Second edit: It seems like I <em>might</em> be able to do this with some <code>/etc/sudoers</code> magic and <code>sudo -u</code>. Perhaps I should have posted this on ServerFault instead, but at least I've learned a bit from this endeavor.</p>

Querying!

Guidance

An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload