diff options
Diffstat (limited to 'usr/local')
| -rw-r--r-- | usr/local/bin/git-wrapper | 23 |
1 files changed, 22 insertions, 1 deletions
diff --git a/usr/local/bin/git-wrapper b/usr/local/bin/git-wrapper index 12c6d21..e46b135 100644 --- a/usr/local/bin/git-wrapper +++ b/usr/local/bin/git-wrapper @@ -7,6 +7,27 @@ if [ -z "$SSH_ORIGINAL_COMMAND" ]; then exit 1 fi +# Handle git init to create new bare repositories +if [[ "$SSH_ORIGINAL_COMMAND" == git\ init* ]]; then + repo=$(echo "$SSH_ORIGINAL_COMMAND" | awk '{print $NF}') + + # Block path traversal attempts and absolute paths + if [[ "$repo" == *..* ]] || [[ "$repo" == /* ]]; then + echo "Invalid path" >&2 + exit 1 + fi + + path="/repositories/$repo" + + # Check if the repository already exists + if [ -d "$path" ]; then + echo "Repository already exists: $repo" >&2 + exit 1 + fi + + exec git init --bare "$path" +fi + # Normalize the SSH_ORIGINAL_COMMAND as modern Git clients can send either form depending on version and protocol negotiation SSH_ORIGINAL_COMMAND=$(echo "$SSH_ORIGINAL_COMMAND" | sed \ 's/^git upload-pack/git-upload-pack/; @@ -42,4 +63,4 @@ case "$cmd" in echo "Command not allowed: $cmd" >&2 exit 1 ;; -esac
\ No newline at end of file +esac |