Server side programs

Are git-receive-pack and git-upload-pack the only two binaries that get 
called directly over a SSH-tunnel?

The git tutorial explicitly mentions this for git-receive-pack. Several 
of the other docs (git-fetch-pack, git-peek-remote and git-clone-pack) 
mentions git-upload-pack. No other program from the git suite is 
mentioned as an immediate target for ssh connections.

The reason I'm asking is that I'm adding support for userrelative paths 
(git pull ssh://host:~user/somedir) and removing the possibilities to 
use a compromised but limited account for finding out what other 
useraccounts are available.

-- 
Andreas Ericsson                   andreas.ericsson@op5.se
OP5 AB                             www.op5.se
Tel: +46 8-230225                  Fax: +46 8-230231

On Sun, 23 Oct 2005, Andreas Ericsson wrote:

Are git-receive-pack and git-upload-pack the only two binaries that get called
directly over a SSH-tunnel?

With the normal pack thing, yes.

They will exec other programs (mainly git-rev-list and 
git-[un]pack-objects), and a client can ask for other programs 
(git-send-pack takes an "--exec=" argument, for example), but those two 
should be sufficient if you have a server-side special "restricted shell" 
that you want to run instead of a real one.

One more issue: you can't create a new archive or delete an old one (or do 
administration like repacking, fsck etc) with those interfaces, so if you 
want these limited users to be able to do that, then you'd need to add a 
few administration commands too.

		Linus