progit/progit — pull request #206 by alexey-sveshnikov (2012-05-03 15:52:47+00:00)
Title: Security issue in instructions for setting up git-shell

You say
```
Now, the 'git' user can only use the SSH connection to push and pull Git repositories and can’t shell onto the machine. If you try, you’ll see a login rejection like this:

$ ssh git@gitserver
fatal: What do you think I am? A shell?
Connection to gitserver closed.
```

This is not secure. User can do the following as well:

```
ssh git@gitserver bash
ssh git@gitserver cat /etc/passwd
ssh -NfX /usr/bin/firefox
```
... and so on