ikiwiki (3.20130711) unstable; urgency=low
[ikiwiki.git] / doc / forum / ikiwiki_and_big_files / comment_2_2d996f1124aedc10f345139c3d8b11df._comment
1 [[!comment format=mdwn
2  username="http://smcv.pseudorandom.co.uk/"
3  nickname="smcv"
4  subject="comment 2"
5  date="2012-12-21T11:02:19Z"
6  content="""
7 Unfortunately, ikiwiki [[doesn't follow symlinks for security
8 reasons|security]] - if it did, anyone who can commit to the wiki
9 repository could publish any file readable by the user who runs ikiwiki,
10 including secrets like `~/.gnupg/secring.gpg` or
11 `~/.ssh/identity`.
12
13 git-annex relies on symlinks, so that restriction breaks it.
14 It would be great to be able to use some restricted, safe subset
15 of symlinks (\"relative symlinks that point into `.git/annex`\" would
16 be enough to support git-annex), and I've looked into it in the past.
17 My [[plugins/contrib/album]] plugin would benefit from being able
18 to annex the actual photos, for instance.
19 """]]