News for hackers. Stuff that matters.

A comment on Linux Hardening Guide. Parent comment

Re:Linux Hardening Guide by dotancohen on Thursday December 31, 2020 @01:57PM (#25595804) 

  > Why is it bad to git clone on a production server? Let's assume
  > I'm not an idiot please, just misguided. This isn't reddit.
This cargocult ritual is for those who manage farms of identical servers. If you have a single production server with no load balancing, it's fine.

But be careful, Git does not handle file permissions well by default. If you have a directory or file that needs special permissions (like a cron job script) then you should set `core.fileMode` to `false` in your git config.

[ Parent | on HN ]
Re:Linux Hardening Guide by yjftsjthsd-h on Thursday December 31, 2020 @02:57PM (#25596433)
> This cargocult ritual is for those who manage farms of identical servers.

Then it's not cargo-culting, since for farms of identical servers manually checking out a repo is going to cause you pain.

[ Parent | on HN ]
Re:Linux Hardening Guide by dotancohen on Monday January 04, 2021 @01:13AM (#25628332)
It _is_ cargo-culting when publications begin to recommend it as standard practice, without explaining the reasoning. Because at that point either the publisher is doing it without understanding why, or the reader will follow the ritual without understanding why.
[ Parent | on HN ]