git.oblomov.eu Git - ikiwiki/blob - doc/forum/ikiwiki_and_big_files/comment_2_2d996f1124aedc10f345139c3d8b11df._comment

   1 [[!comment format=mdwn
   2  username="http://smcv.pseudorandom.co.uk/"
   3  nickname="smcv"
   4  subject="comment 2"
   5  date="2012-12-21T11:02:19Z"
   6  content="""
   7 Unfortunately, ikiwiki [[doesn't follow symlinks for security
   8 reasons|security]] - if it did, anyone who can commit to the wiki
   9 repository could publish any file readable by the user who runs ikiwiki,
  10 including secrets like `~/.gnupg/secring.gpg` or
  11 `~/.ssh/identity`.
  12
  13 git-annex relies on symlinks, so that restriction breaks it.
  14 It would be great to be able to use some restricted, safe subset
  15 of symlinks (\"relative symlinks that point into `.git/annex`\" would
  16 be enough to support git-annex), and I've looked into it in the past.
  17 My [[plugins/contrib/album]] plugin would benefit from being able
  18 to annex the actual photos, for instance.
  19 """]]