News for hackers. Stuff that matters.

A comment on Git security vulnerability announced. Parent comment

Re:Git security vulnerability announced by teruakohatu on Tuesday April 12, 2022 @11:10PM (#31010801)
Couldn't that be mitigated by git adding a --readonly option that prevents any write operations? Then just use that option for any PS1 executables?
[ Parent | on HN ]
Re:Git security vulnerability announced by Too on Wednesday April 13, 2022 @12:18AM (#31011164)
core.fsconfig is supposed to be read only, but since it’s an external process, git doesn’t know what really happens in there, so it can’t propagate any —-readonly enforcement.
[ Parent | on HN ]
Re:Git security vulnerability announced by leni536 on Wednesday April 13, 2022 @03:38AM (#31012100)
That's where some sandboxing could help, maybe.
[ Parent | on HN ]