Re: [PATCH v3 05/10] config doc: elaborate on fetch.fsckObjects security

2018-07-28 Thread Ævar Arnfjörð Bjarmason
On Fri, Jul 27 2018, Junio C Hamano wrote: > Ævar Arnfjörð Bjarmason writes: > >> +For now, the paranoid need to find some way to emulate the quarantine >> +environment if they'd like the same protection as "push". E.g. in the > > We probably should mention that you can immediately prune, as t

Re: [PATCH v3 05/10] config doc: elaborate on fetch.fsckObjects security

2018-07-27 Thread Junio C Hamano
Ævar Arnfjörð Bjarmason writes: > +For now, the paranoid need to find some way to emulate the quarantine > +environment if they'd like the same protection as "push". E.g. in the We probably should mention that you can immediately prune, as these unwanted crufts are unreferenced. That would pro

[PATCH v3 05/10] config doc: elaborate on fetch.fsckObjects security

2018-07-27 Thread Ævar Arnfjörð Bjarmason
Change the transfer.fsckObjects documentation to explicitly note the unique security and/or corruption issues fetch.fsckObjects suffers from, since it doesn't have a quarantine environment. This was already alluded to in the existing documentation, but let's spell it out so there's no confusion he