gitlab-org--gitlab-foss/lib/gitlab
Nick Thomas 6847060266 Rework the permissions model for SSH key restrictions
`allowed_key_types` is removed and the `minimum_<type>_bits` fields are
renamed to `<tech>_key_restriction`. A special sentinel value (`-1`) signifies
that the key type is disabled.

This also feeds through to the UI - checkboxes per key type are out, inline
selection of "forbidden" and "allowed" (i.e., no restrictions) are in.

As with the previous model, unknown key types are disallowed, even if the
underlying ssh daemon happens to support them. The defaults have also been
changed from the lowest known bit size to "no restriction". So if someone
does happen to have a 768-bit RSA key, it will continue to work on upgrade, at
least until the administrator restricts them.
2017-08-30 20:50:44 +01:00
..
auth Enable Layout/TrailingWhitespace cop and auto-correct offenses 2017-08-15 13:44:37 -04:00
background_migration Merge branch 'backstage/gb/migrate-stages-statuses' into 'master' 2017-08-21 11:47:44 +00:00
badge Reword success to passing for pipeline badges 2017-07-21 10:22:11 +02:00
bitbucket_import Rename many path_with_namespace -> full_path 2017-08-01 07:26:58 +02:00
cache Whitelist or fix additional Gitlab/PublicSend cop violations 2017-08-14 12:14:11 -04:00
checks replace is_ancestor with ancestor? 2017-08-29 11:14:42 +03:00
ci Enable Layout/TrailingWhitespace cop and auto-correct offenses 2017-08-15 13:44:37 -04:00
conflict Incorporate Gitaly's CommitService.FindCommit RPC 2017-08-07 23:33:43 -04:00
cycle_analytics Refactor Gitlab::Git::Commit to include a repository 2017-08-07 22:34:34 -04:00
data_builder Simplify system hook testing and guarantee test will fire 2017-08-27 15:50:20 -07:00
database Improve migrations using triggers 2017-08-29 13:02:44 +02:00
dependency_linker Fix diff of requirements.txt file by not matching newlines as part of package names 2017-06-27 16:20:01 -05:00
diff Show un-highlighted diffs when blobs are the same 2017-08-24 11:11:18 +01:00
downtime_check
email Check against "Auto-Submitted: no" instead 2017-08-03 19:29:18 +08:00
etag_caching Support multiple Redis instances based on queue type 2017-07-11 03:35:47 +00:00
fogbugz_import Backport of multiple_assignees_feature [ci skip] 2017-05-04 17:11:53 +03:00
gfm
git Use git update-ref --stdin -z to delete refs 2017-08-30 22:01:23 +08:00
gitaly_client replace is_ancestor with ancestor? 2017-08-29 11:14:42 +03:00
github_import Whitelist or fix additional Gitlab/PublicSend cop violations 2017-08-14 12:14:11 -04:00
gitlab_import Enable the Layout/SpaceBeforeBlockBraces cop 2017-08-09 11:52:22 +02:00
google_code_import Enable the Style/PreferredHashMethods cop 2017-06-02 19:11:26 +02:00
gpg Only create commit GPG signature when necessary 2017-08-16 18:57:50 +02:00
graphs
health_checks replace is_successful? with successful? 2017-08-29 11:14:42 +03:00
import_export Fix events error importing GitLab projects 2017-08-28 15:24:24 +02:00
ldap Support simple string LDAP attribute specifications, and search for name rather than username attributes 2017-08-23 22:06:22 +02:00
markdown Whitelist or fix additional Gitlab/PublicSend cop violations 2017-08-14 12:14:11 -04:00
metrics Add sidekiq metrics endpoint and add http server to sidekiq 2017-08-07 17:13:02 +00:00
middleware Enable Layout/TrailingWhitespace cop and auto-correct offenses 2017-08-15 13:44:37 -04:00
o_auth Better categorize test coverage results 2017-08-11 10:59:11 -04:00
performance_bar Merge branch 'rc/bump-peek-performance_bar' into 'master' 2017-07-19 08:52:01 +00:00
project_authorizations Enable Style/DotPosition Rubocop 👮 2017-06-21 13:48:12 +00:00
prometheus replace has_matching_label with has_matching_label? 2017-08-29 11:14:42 +03:00
quick_actions Fixes #29385: Add /shrug and /tableflip commands 2017-07-28 14:37:44 -05:00
redis Don't depend on Rails for Redis configuration file paths 2017-08-15 15:08:56 -04:00
request_profiler
saml
sanitizers
serializer
sherlock Enable Style/DotPosition Rubocop 👮 2017-06-21 13:48:12 +00:00
sidekiq_middleware
sidekiq_status
slash_commands Enable Layout/TrailingWhitespace cop and auto-correct offenses 2017-08-15 13:44:37 -04:00
sql Refactor 2017-08-29 18:00:03 +09:00
template
testing
view/presenter implement Presenter::Base#declarative_policy_delegate 2017-06-27 12:41:54 -07:00
access.rb Enable the Style/TrailingCommaInLiteral cop 2017-05-10 18:25:45 +02:00
allowable.rb convert all the policies to DeclarativePolicy 2017-06-27 12:44:37 -07:00
app_logger.rb
asciidoc.rb Fix LaTeX formatting for AsciiDoc wiki 2017-05-24 15:47:35 +02:00
auth.rb Whitelist or fix additional Gitlab/PublicSend cop violations 2017-08-14 12:14:11 -04:00
background_migration.rb Remove obsolete argument from bg migrations code 2017-07-18 10:43:12 +02:00
bare_repository_importer.rb Migrate creation of nested groups into a service 2017-08-23 13:36:38 +02:00
blame.rb Blob#load_all_data! doesn’t need an argument 2017-06-07 14:28:33 -05:00
changes_list.rb
chat_name_token.rb Support multiple Redis instances based on queue type 2017-07-11 03:35:47 +00:00
ci_access.rb Refactor to remove a special case 2017-06-05 05:32:26 -07:00
closing_issue_extractor.rb
color_schemes.rb
config_helper.rb
contributions_calendar.rb fix rubocop violations 👮 2017-07-31 18:19:18 -05:00
contributor.rb
current_settings.rb Repair Regression caused by - !11573 2017-07-11 14:23:51 +08:00
daemon.rb Add sidekiq metrics endpoint and add http server to sidekiq 2017-08-07 17:13:02 +00:00
database.rb Improve migrations using triggers 2017-08-29 13:02:44 +02:00
dependency_linker.rb Autolink package names in requirements.txt 2017-05-23 15:35:59 -05:00
downtime_check.rb Enable Style/DotPosition Rubocop 👮 2017-06-21 13:48:12 +00:00
ee_compat_check.rb Fix ee_compat_check when EE branch uses a prefix 2017-08-09 16:49:44 +02:00
emoji.rb
encoding_helper.rb Raise encoding confidence threshold to 50 2017-08-08 19:09:56 +08:00
environment.rb Move hostname to Gitlab::Environment 2017-08-04 15:38:49 +02:00
environment_logger.rb
exclusive_lease.rb Support multiple Redis instances based on queue type 2017-07-11 03:35:47 +00:00
fake_application_settings.rb If migrations are pending, make CurrentSettings use existing values and populate missing columns with defaults 2017-06-19 09:54:48 -07:00
file_detector.rb Add auxiliary blob viewers to dependency files 2017-05-17 14:10:00 -05:00
file_finder.rb Fix searching for files by path 2017-08-25 10:36:32 +01:00
git.rb Incorporate RefsService.FindAllBranches Gitaly RPC 2017-07-27 15:40:54 -04:00
git_access.rb Add settings for minimum key strength and allowed key type 2017-08-30 20:50:44 +01:00
git_access_wiki.rb Remove GitAccessStatus (no longer needed) 2017-06-05 05:32:26 -07:00
git_logger.rb
git_post_receive.rb Added repository_update hook 2017-05-12 23:26:48 +01:00
git_ref_validator.rb More Gitaly annotations 2017-07-13 18:05:55 +02:00
gitaly_client.rb Whitelist or fix additional Gitlab/PublicSend cop violations 2017-08-14 12:14:11 -04:00
gl_id.rb
gl_repository.rb Pass GL_REPOSITORY in Workhorse responses 2017-05-05 10:52:06 -03:00
gon_helper.rb configure webpack publicPath dynamically to account for CDN or relative path settings 2017-06-28 22:26:16 -05:00
gpg.rb reset original directory in ensure 2017-08-14 12:57:56 +02:00
group_hierarchy.rb Enable Style/DotPosition Rubocop 👮 2017-06-21 13:48:12 +00:00
highlight.rb Enable Style/DotPosition Rubocop 👮 2017-06-21 13:48:12 +00:00
i18n.rb Add Korean translation to i18n 2017-08-07 09:19:41 +00:00
identifier.rb
import_export.rb Fixes race condition in project uploads 2017-08-07 14:31:45 +02:00
import_formatter.rb
import_sources.rb Set the new GitHub import as import source 2017-08-07 13:06:13 -03:00
incoming_email.rb
issuable_metadata.rb Remove remaining N+1 queries in merge requests API with emojis and labels 2017-07-08 22:19:34 -07:00
issuable_sorter.rb
issues_labels.rb
job_waiter.rb Use event-based waiting in Gitlab::JobWaiter 2017-08-22 09:54:46 +01:00
kubernetes.rb Encode certificate-authority-data in base64 2017-07-06 19:38:41 +08:00
lazy.rb Whitelist or fix additional Gitlab/PublicSend cop violations 2017-08-14 12:14:11 -04:00
lfs_token.rb Support multiple Redis instances based on queue type 2017-07-11 03:35:47 +00:00
logger.rb Fix a potential timeout in Gitlab::Logger.read_latest 2017-08-22 17:09:45 -04:00
mail_room.rb Support multiple Redis instances based on queue type 2017-07-11 03:35:47 +00:00
markup_helper.rb
metrics.rb Add missing trailing newlines 2017-06-02 19:45:58 +02:00
optimistic_locking.rb
other_markup.rb Enable Style/DotPosition Rubocop 👮 2017-06-21 13:48:12 +00:00
otp_key_rotator.rb Added EachBatch for iterating tables in batches 2017-07-07 16:39:36 +02:00
pages_transfer.rb
path_regex.rb Add contents of public as forbidden top-level routes 2017-07-25 09:18:54 +02:00
performance_bar.rb Expire cached user IDs that can see the performance after 5 minutes 2017-07-17 13:29:33 +02:00
polling_interval.rb
popen.rb
project_search_results.rb Backport FileFinder from EE 2017-05-12 13:21:30 +03:00
project_template.rb Add two more project templates 2017-08-15 12:55:54 +02:00
project_transfer.rb
prometheus_client.rb Remove orig file + rubocop cleanup 2017-06-05 21:00:57 +02:00
protocol_access.rb
recaptcha.rb
reference_extractor.rb Re-enable SqlInjection and CommandInjection 2017-08-08 10:50:54 -04:00
regex.rb Enfouce namespace for Kubernetes to lowercase 2017-08-22 15:12:27 +09:00
repo_path.rb Add “Project moved” error to Git-over-SSH 2017-06-16 14:14:19 -07:00
repository_check_logger.rb
request_context.rb
request_forgery_protection.rb Add log messages to clarify log messages about API CSRF token verification failure 2017-07-28 15:39:39 +02:00
request_profiler.rb
route_map.rb Merge branch '24570-use-re2-for-user-supplied-regexp-9-3' into 'security-9-3' 2017-07-19 22:28:41 -05:00
routing.rb Also inject new route helpers into includers of GitlabRoutingHelper 2017-07-08 16:24:18 -05:00
search_results.rb
seeder.rb Better categorize test coverage results 2017-08-11 10:59:11 -04:00
sentry.rb Enable the Style/TrailingCommaInArguments cop 2017-05-10 18:25:45 +02:00
shell.rb Speed up project creation by inlining repository creation 2017-08-15 18:33:07 +01:00
shell_adapter.rb
sherlock.rb
sidekiq_logger.rb
sidekiq_status.rb Backports EE mirror stuck handling feature (https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/2628) to CE 2017-08-17 13:38:05 +01:00
sidekiq_throttler.rb Only require sidekiq-limit_fetch when enabled in settings 2017-08-21 12:56:22 +01:00
snippet_search_results.rb
ssh_public_key.rb Rework the permissions model for SSH key restrictions 2017-08-30 20:50:44 +01:00
string_range_marker.rb Don't escape html entities when rich == raw line 2017-08-17 19:55:07 +02:00
string_regex_marker.rb Add Gitlab::StringRegexMarker 2017-05-10 08:26:21 -05:00
time_tracking_formatter.rb
timeless.rb
untrusted_regexp.rb Upgrade the re2 gem to 1.1.0 2017-07-24 11:03:37 +01:00
update_path_error.rb
upgrader.rb
uploads_transfer.rb Bring in security changes from the 9.2.5 release 2017-06-07 21:16:20 -07:00
url_blocker.rb Merge branch 'rs-alphanumeric-ssh-params' into 'security-9-4' 2017-08-10 20:47:28 +01:00
url_builder.rb Don't reload ActiveRecord objects when building note URLs 2017-07-11 13:02:55 +01:00
url_sanitizer.rb Don't allow to pass a user to ProjectWiki#http_url_to_repo 2017-05-30 14:18:58 +02:00
usage_data.rb Use correct Environment-class within Gitlab namespace 2017-08-07 15:54:30 +02:00
user_access.rb Fix tests and fine tweak permission error message 2017-07-19 22:37:38 +08:00
user_activities.rb Support multiple Redis instances based on queue type 2017-07-11 03:35:47 +00:00
utils.rb Fix CI_PROJECT_PATH_SLUG slugify 2017-08-15 08:22:56 +03:00
version_info.rb
visibility_level.rb Always return the translated level name. 2017-07-13 12:11:09 -05:00
workhorse.rb Remove deprecated field from workhorse API responses 2017-08-15 16:39:31 +02:00