[issue778] hooks not run in hgwebdir, but works in global hgrc

James Mills prologic at shortcircuit.net.au
Fri Oct 12 23:09:38 UTC 2007


On Fri, Oct 12, 2007 at 11:15:16AM -0500, Matt Mackall wrote:
> This is a security feature.
> 
> Mercurial doesn't trust most settings in hgrc files that are not owned
> by the current user. If it did, Alice could add an extension to
> .hg/hgrc that would steal Bob's data when Bob ran "hg log" in her
> directory. Similar problems are possible with hooks as well.

How then do we get a hook working ?

I have apache running as the 'www' user
with my hg repos in /data/hg/public/

My hook is in /data/hg/scripts/
and is owned by root:root

I want this hook to be run everytime
someone pushes to the repo.

cheers
James

-- 
--
-"Problems are Solved by Method"
-
- James Mills <prologic at shortcircuit.net.au>
- HomePage: http://shortcircuit.net.au/~prologic/
- IRC: irc://shortcircuit.net.au#se

Please avoid sending me Word or PowerPoint attachments.
See http://www.gnu.org/philosophy/no-word-attachments.html



More information about the Mercurial-devel mailing list