From a91964efa2a5de00fbe0b4a3d8a51df07d26420a Mon Sep 17 00:00:00 2001 From: Bryce Kwon Date: Sun, 1 Nov 2026 21:49:28 -1000 Subject: Say where an edited auth filter belongs make install copies every filter into the filters directory with mode 0644, so an edited auth-inline.lua there lost its lists on the next install, which turned every protected repository public, and until then showed its password hashes to every local user. --- custom/cgitrc | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) (limited to 'custom/cgitrc') diff --git a/custom/cgitrc b/custom/cgitrc index c1a5b68..1e2dbaa 100644 --- a/custom/cgitrc +++ b/custom/cgitrc @@ -301,8 +301,11 @@ trust-scan-config=0 # Filter command invoked to authenticate access, gating repositories behind a # login. See custom/extensions/auth-inline.lua and -# custom/extensions/auth-file.lua. Value is a command. Default is none. -#auth-filter=lua:/usr/local/lib/cgit/filters/auth-inline.lua +# custom/extensions/auth-file.lua. make install overwrites the copies it puts +# in /usr/local/lib/cgit/filters, so edit a copy kept elsewhere, readable only +# by root and the web server's group, and point this at it. Value is a +# command. Default is none. +#auth-filter=lua:/etc/cgit/auth-inline.lua # Number of items to display in atom feeds. Value is an integer. Default is 10. max-atom-items=10 -- cgit 2.12.1