I am using git-svn to develop code that is hosted on a SVN+SSH repository. I do not have to input my ssh password on the server every time I dcommit/update/rebase, so I assume it is cached somewhere.
Where开发者_如何学Python are my credentials saved? Inside the .git directory, or globally in some dot-file in my home directory?
I ask because my git repository is public-readable on my home directory (we have a homes-are-readable policy in our laboratory), and I am afraid that this might leak my ssh credentials to all the lab.
Thanks.
As noted in Does Git-Svn Store Svn Passwords?, they are stored in ~/.subversion
, so as long as your home directory itself is not public readable you shouldn't have a problem (though as I've just read your last line a bit more thoroughly, you may have a problem).
Have you configured your SSH server to use key-based authentication? It's likely that your private key (password protected or not) is in ~/.ssh/id_rsa
or ~/.ssh/id_dsa
(the public key being the .pub
file associated with them). You should definitely protect those directories, although, in most cases, ssh
won't even let it work if they're readable by someone else (other than root).
精彩评论