git-compat-util: allow root to access both SUDO_UID and root owned

Previous changes introduced a regression which will prevent root for
accessing repositories owned by thyself if using sudo because SUDO_UID
takes precedence.

Loosen that restriction by allowing root to access repositories owned
by both uid by default and without having to add a safe.directory
exception.

A previous workaround that was documented in the tests is no longer
needed so it has been removed together with its specially crafted
prerequisite.

Helped-by: Johanness Schindelin <Johannes.Schindelin@gmx.de>
Signed-off-by: Carlo Marcelo Arenas Belón <carenas@gmail.com>
Signed-off-by: Junio C Hamano <gitster@pobox.com>

diff --git a/Documentation/config/safe.txt b/Documentation/config/safe.txt
index c6ebd1674dddd11d6dd0bf16a58c1aebfdfd268f..74627c5e7c62337b5f1439acb8000bb728fb8245 100644 (file)
--- a/Documentation/config/safe.txt
+++ b/Documentation/config/safe.txt
@@ -30,12 +30,13 @@ that you deem safe.
 As explained, Git only allows you to access repositories owned by
 yourself, i.e. the user who is running Git, by default.  When Git
 is running as 'root' in a non Windows platform that provides sudo,
- however, git checks the SUDO_UID environment variable that sudo creates
-and will allow access to the uid recorded as its value instead.
+however, git checks the SUDO_UID environment variable that sudo creates
+and will allow access to the uid recorded as its value in addition to
+the id from 'root'.
 This is to make it easy to perform a common sequence during installation
 "make && sudo make install".  A git process running under 'sudo' runs as
 'root' but the 'sudo' command exports the environment variable to record
 which id the original user has.
 If that is not what you would prefer and want git to only trust
-repositories that are owned by root instead, then you must remove
+repositories that are owned by root instead, then you can remove
 the `SUDO_UID` variable from root's environment before invoking git.

diff --git a/git-compat-util.h b/git-compat-util.h
index e7cbfa65c9a3c8431a3060162e224011fbb4805f..f505f817d5fc16622eff33cc343f649c66ce033c 100644 (file)
--- a/git-compat-util.h
+++ b/git-compat-util.h
@@ -447,7 +447,12 @@ static inline int is_path_owned_by_current_uid(const char *path)
 
        euid = geteuid();
        if (euid == ROOT_UID)
-               extract_id_from_env("SUDO_UID", &euid);
+       {
+               if (st.st_uid == ROOT_UID)
+                       return 1;
+               else
+                       extract_id_from_env("SUDO_UID", &euid);
+       }
 
        return st.st_uid == euid;
 }

diff --git a/t/t0034-root-safe-directory.sh b/t/t0034-root-safe-directory.sh
index a621f1ea5eb12e25d68eed4e605a2d1e8d40e070..ff311761289ec50da7fc3b1e9db67dfcf84edd08 100755 (executable)
--- a/t/t0034-root-safe-directory.sh
+++ b/t/t0034-root-safe-directory.sh
@@ -68,7 +68,7 @@ test_expect_success 'can access if addressed explicitly' '
        )
 '
 
-test_expect_failure SUDO 'can access with sudo if root' '
+test_expect_success SUDO 'can access with sudo if root' '
        (
                cd root/p &&
                sudo git status
@@ -85,19 +85,6 @@ test_expect_success SUDO 'can access with sudo if root by removing SUDO_UID' '
        )
 '
 
-test_lazy_prereq SUDO_SUDO '
-       sudo sudo id -u >u &&
-       id -u root >r &&
-       test_cmp u r
-'
-
-test_expect_success SUDO_SUDO 'can access with sudo abusing SUDO_UID' '
-       (
-               cd root/p &&
-               sudo sudo git status
-       )
-'
-
 # this MUST be always the last test
 test_expect_success SUDO 'cleanup' '
        sudo rm -rf root