hedge - git access control for ssh ================================== hedge is run as the forced command of an ssh key. It allows git fetch and push to the repositories an access list grants to that key, and nothing else. Requirements ------------ In order to run hedge you need git-shell, which comes with git. Installation ------------ Edit config.mk to match your local setup (hedge is installed into the /usr/local namespace by default). Afterwards enter the following command to build and install hedge (if necessary as root): make clean install Running hedge ------------- List the grants in the acl file: greenhouse write alice greenhouse read bob and give each ssh key of the git user its identity: command="/usr/local/bin/hedge alice",restrict ssh-ed25519 AAAA... Configuration ------------- The configuration of hedge is done by creating a custom config.h and (re)compiling the source code.