[GH-ISSUE #2663] ${HOME}/.git-credentials is not covered by default #1679

New issue

Closed

opened 2026-05-05 08:19:35 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 08:19:35 -06:00

Owner

Originally created by @dandelionred on GitHub (Apr 23, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2663

https://git-scm.com/book/en/v2/Git-Tools-Credential-Storage

Some of these helpers have options. The “store” helper can take a --file argument, which customizes where the plain-text file is saved (the default is ~/.git-credentials)

Files under ${HOME}/.git-credentials/ have plaintext passwords.

I use 0.9.58.2

Originally created by @dandelionred on GitHub (Apr 23, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/2663 https://git-scm.com/book/en/v2/Git-Tools-Credential-Storage > Some of these helpers have options. The “store” helper can take a --file <path> argument, which customizes where the **plain-text** file is saved (**the default is ~/.git-credentials**) Files under `${HOME}/.git-credentials/` have plaintext passwords. I use 0.9.58.2

gitea-mirror closed this issue

2026-05-05 08:19:36 -06:00

gitea-mirror commented

2026-05-05 08:19:37 -06:00

Author

Owner

@rusty-snake commented on GitHub (Apr 24, 2019):

@dandelionred done.
63efb45 blacklist ${HOME}/.git-credentials and ${HOME}/.config/git.

If not specified, credentials
will be searched for from ~/.git-credentials and
$XDG_CONFIG_HOME/git/credentials, and credentials will be written to
~/.git-credentials if it exists, or $XDG_CONFIG_HOME/git/credentials if it
exists and the former does not.

63efb45 also allow ${HOME}/.git-credentials and ${HOME}/.config/git in all profile where ${HOME}/.gitconfig is allowed.

@rusty-snake commented on GitHub (Apr 24, 2019): @dandelionred done. 63efb45 blacklist `${HOME}/.git-credentials` and `${HOME}/.config/git`. > If not specified, credentials will be searched for from ~/.git-credentials and $XDG_CONFIG_HOME/git/credentials, and credentials will be written to ~/.git-credentials if it exists, or $XDG_CONFIG_HOME/git/credentials if it exists and the former does not. 63efb45 also allow `${HOME}/.git-credentials` and `${HOME}/.config/git` in all profile where `${HOME}/.gitconfig` is allowed.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1679

No description provided.

Rows
Columns