Jon Loeliger [off-list ref] writes:
So, like, the other day Junio C Hamano mumbled:
quoted
It all depends on how you start git-daemon, but the last
parameters to git-daemon are path whitelist so presumably
placing the private repository outside of it should be enough.
Or am I missing something deeper?
I want git-daemon to serve up the repository.
I just want to have it served to people who can
supply a password or have an ssh key in place.
Sorry, git-daemon was written as anonymous download service from
the beginning and there is no provision for something like that
in place (as you probably have noticed when you hacked on it
recently ;-)).
Letting them ssh-in, and if you do not trust them giving them
git-shell as their login shell, might be an option. I do not
think of anything else offhand that is already available.