1

I want to secure some git repositories and using only users and groups is not sufficient.

I'm thinking about using ACLs to control the access.

The access to the repositories is local, the users have shell access.

Aragorn
  • 300
  • 6
  • 11

4 Answers4

1

You should check out AIX acls.

Not Now
  • 3,552
  • 18
  • 19
1

I was going to suggest looking at the options provided by git init --shared=, but you preempted that by saying "using only users and groups is not sufficient." So I think your options are:

  • ACLs, as suggested by everyone.
  • removing local access, and using gitosis to control access via SSH keys.
pgs
  • 3,521
  • 19
  • 19
0

Please be more specific. How are the users getting to the repositories as it is? Why are users and groups insufficient?

koenigdmj
  • 1,055
  • 7
  • 12
  • there are more users in the group than users needing the repository access and I don't have control of how the groups are created or asigned. and the users access the repositories in the same machine – Aragorn Jul 22 '09 at 14:37
0

Reflecting the comment on the previous, ACLs might indeed be the way to go. It's fairly easy either to grant users access individually, or to give the group access and block certain users. The tutorial here may be useful.

koenigdmj
  • 1,055
  • 7
  • 12