20 lines
797 B
Plaintext
20 lines
797 B
Plaintext
[[!comment format=mdwn
|
|
username="http://smcv.pseudorandom.co.uk/"
|
|
nickname="smcv"
|
|
subject="comment 2"
|
|
date="2012-12-21T11:02:19Z"
|
|
content="""
|
|
Unfortunately, ikiwiki [[doesn't follow symlinks for security
|
|
reasons|security]] - if it did, anyone who can commit to the wiki
|
|
repository could publish any file readable by the user who runs ikiwiki,
|
|
including secrets like `~/.gnupg/secring.gpg` or
|
|
`~/.ssh/identity`.
|
|
|
|
git-annex relies on symlinks, so that restriction breaks it.
|
|
It would be great to be able to use some restricted, safe subset
|
|
of symlinks (\"relative symlinks that point into `.git/annex`\" would
|
|
be enough to support git-annex), and I've looked into it in the past.
|
|
My [[plugins/contrib/album]] plugin would benefit from being able
|
|
to annex the actual photos, for instance.
|
|
"""]]
|