On 2023/03/28 11:18:40 +0200, Stefan Sperling <stsp@stsp.name> wrote:
> This improved version has been tested more thoroughly and fixes
> a few bugs such that gitwrapper actually works as advertised.
> It also makes use of unveil(2) to restrict the set of programs
> which can be run (even though a user who ends up running this
> tool probably has shell access anyway).

I haven't run-tested it yet but reads fine; let's get it in and
continue hacking in tree.

> Regarding exec without fork, I tried this initially but gitwrapper
> always ended up with SIGABRT in exec. Not sure why. But forking is
> not a huge deal.

Odd, I'll take a look.