diff options
| author |  achilleas.k@14be77d42a1252fab5ec9dbf4e5ea03c5833e8c8 <achilleask@web> | 2017-04-26 16:37:50 +0000 |
|---|---|---|
| committer |  admin <admin@branchable.com> | 2017-04-26 16:37:50 +0000 |
| commit | 0034508eb8543bcb84a7eee9204071d75b4d3743 (patch) | |
| tree | c551f8bd110d44515903bf4269012bd9c0cdb451 | |
| parent | 42bf047ea9b0056ee0a143b943b472bd92fa170d (diff) | |
| -rw-r--r-- | doc/forum/Malicious_autoenabled_remotes.mdwn | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/doc/forum/Malicious_autoenabled_remotes.mdwn b/doc/forum/Malicious_autoenabled_remotes.mdwn index 8e8ff1883..7e48e5d50 100644 --- a/doc/forum/Malicious_autoenabled_remotes.mdwn +++ b/doc/forum/Malicious_autoenabled_remotes.mdwn @@ -3,3 +3,7 @@ I've been trying to figure out whether git-annex can be used to make a user unkn *Is it possible, when performing (for example) `git clone git@trustedserver:user/repo && cd repo && git annex init` for annex to set up and enable a remote that is **not** on `trustedserver`?* I'm trying to imagine a scenario where someone with access to the repository (a person who I share files with) can set up a remote to a different server (e.g., `badremote`), set it to `autoenable=true`, and sync changes. Would this enable the other user to put files on `badremote` that are not on `trustedserver` but are tracked by annex? More importantly, if this happens and I perform a `git clone` → `git annex init` → `git annex sync --content`, would I be downloading files from `badremote` without specifically enabling it? + + +Thanks, +Achilleas |