X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/0538498ed05f4abf3cb5102c299392d4b4c0086d..d3984de8a113a28c7806cdfe82c470a22c20dda4:/doc/tips/untrusted_git_push.mdwn

diff --git a/doc/tips/untrusted_git_push.mdwn b/doc/tips/untrusted_git_push.mdwn
index 958e04e77..aef67a3db 100644
--- a/doc/tips/untrusted_git_push.mdwn
+++ b/doc/tips/untrusted_git_push.mdwn
@@ -39,12 +39,15 @@ or manipulate tags.
 One thing to keep an eye on is uploading large files. It may be easier to
 do this via git push than using the web, and that could be abused.
 
+Also, no checking is done that the authors of commits are right, so people
+can make a commit that pretends to be done by someone else.
+
 ## user setup
 
 Add a dedicated user who will push in untrusted commits. This user should have
 a locked password, and `git-shell` as its shell.
 
-	root@bluebird:/home/joey>adduser --shell=/usr/bin/git-shell--disabled-password anon
+	root@bluebird:/home/joey>adduser --shell=/usr/bin/git-shell --disabled-password anon
 	Adding user `anon' ...
 
 ## ikiwiki setup