I found error log from apache2 that is fatal: unsafe repository ('/home/repon' is owned by someone else) It because I have 'git rev-parse --symbolic-full-name --abbrev-ref HEAD' in PHP code and looks like new git safety change(https://github.blog/2022-04-12-git-security-vulnerability-announced/) no longer allows www-data run this git command, git config --global --add safe.directory /homerepon does not work, anyone have workaround here to solve this issue? git version: 2.35.3 php version: 7.4 apache2 version: 2.4.41

CodePudding user response：

this because git safe update

you can run this in bash or cmd or powershell

git config --global --add safe.directory *

the command is trust any directory

if you just trust one directory ,you can run this command

git config --global --add safe.directory your-directory

CodePudding user response：

This started appearing with the release of git 2.35.2 security update. That security update fixes vulnerabilities described here. credits @Juan-Kabbali

Here are 4 possible solutions:

• trust git directory (do it if you known the directory contents are safe)

git config --global --add safe.directory /home/repon

This adds to ~/.gitconfig the safe group as shown in this example

[safe]
    directory = /home/repon

• run the command as the correct user, for example:

sudo -u www-data -- git status

Note: This requires the user www-data to have permission to execute the git command.

• change git repository owner to www-data

sudo chown -R www-data:www-data /home/repon

• downgrade git to 2.35.1 as a temporary solution. For example in Ubuntu:

apt install git-man=1:2.17.0-1ubuntu1 git=1:2.17.0-1ubuntu1

Note: At least on Windows, it appears that all git repositories on ejectable drives are considered unsafe and changing ownership does not seem to work.