Commit Briefs

Thomas Adam

consistently use ten Xs in mkstemp(3) templates

patch from Josiah Frentsos, thanks!




Thomas Adam

switch gotd.conf syntax from 'unix_socket' to 'listen on'

ok op@


Thomas Adam

remove the gotsh group requirement from gotd; any user can now connect

Repository access is now controlled by access rules in gotd.conf, and concurrent connections to the gotd socket by local users are limited by the listen process. We should keep refining our anti-DoS measures in the future, but at least we have something in place now. ok jamsek, op


Thomas Adam

fork gotd repo_read/repo_write children on demand

ok op, jamsek


Thomas Adam

add more gotd regression tests for bad requests; patch by Mikhail

And rename req_wrong_commit.sh to request_bad.sh to reflect the broader scope of this test script.




Thomas Adam

add a gotd regression test which requests a non-existent commit

Patch by Mikhail


Thomas Adam

in gotd regress, use USER instead of USERNAME and check for sudo/doas users

Problem where USERNAME is not usually set on OpenBSD reported by Mikhail ok jamsek



Thomas Adam

add a gotd auth test case for an explicitly denied group

ok op@


Thomas Adam

add a gotd auth test case for explicitly denied users

ok op@


Thomas Adam

add a test case for requests from users not listed in gotd.conf

ok op@


Thomas Adam

fix group membership check in gotd auth

ok op@


Thomas Adam

implement per-repository read/write authorization rules in gotd

ok op@


Thomas Adam

add a regression test for sending to an empty repository via gotd

ok op@


Thomas Adam

awk ftw! no need to grep, awk can filter lines by itself

ok stsp@