Commit Briefs

Omar Polo

consistently use ten Xs in mkstemp(3) templates

patch from Josiah Frentsos, thanks!


Stefan Sperling

add support for protecting references against 'got send -f' to gotd

ok op@



Stefan Sperling

switch gotd.conf syntax from 'unix_socket' to 'listen on'

ok op@


Stefan Sperling

remove the gotsh group requirement from gotd; any user can now connect

Repository access is now controlled by access rules in gotd.conf, and concurrent connections to the gotd socket by local users are limited by the listen process. We should keep refining our anti-DoS measures in the future, but at least we have something in place now. ok jamsek, op


Stefan Sperling

fork gotd repo_read/repo_write children on demand

ok op, jamsek


Stefan Sperling

add more gotd regression tests for bad requests; patch by Mikhail

And rename req_wrong_commit.sh to request_bad.sh to reflect the broader scope of this test script.




Stefan Sperling

add a gotd regression test which requests a non-existent commit

Patch by Mikhail


Stefan Sperling

in gotd regress, use USER instead of USERNAME and check for sudo/doas users

Problem where USERNAME is not usually set on OpenBSD reported by Mikhail ok jamsek



Stefan Sperling

add a gotd auth test case for an explicitly denied group

ok op@


Stefan Sperling

add a gotd auth test case for explicitly denied users

ok op@


Stefan Sperling

add a test case for requests from users not listed in gotd.conf

ok op@