Software version

1. CentOS 6.8

2. PHP 7.0.7

3. Git 1.7.1

Environment configuration

1. Created a bare warehouse in the directory/home/work/repositories/test.git

2. git cloneGo to the website root directory/home/work/www/

3. PHPThe running user iswww-data, and the permissions of the/home/work/www/directory are755, belonging towww-datauser andwww-datauser group

4. Thepost-receivehook is configured. When the development environment executesgit push, it will automatically go to the/home/work/www/testdirectory for executiongit pullOperation

   #!/bin/sh cd /home/work/www/test sudo -u www-data env -i git pull

Problem Description

1. When the above configuration is completed, the development environment executesgit push, and the following error appears

   Counting objects: 3, done. Delta compression using up to 8 threads. Compressing objects: 100% (3/3), done. Writing objects: 100% (3/3), 790 bytes | 0 bytes/s, done. Total 3 (delta 1), reused 0 (delta 0) remote: sudo: no tty present and no askpass program specified remote: Gogs: Internal error To ssh://xxx/test.git 6250615..3e4555d master -> master

2. Follow the online tutorial and add this line to/etc/sudoers

   %git ALL=(ALL) NOPASSWD: ALL

3. After configuring in this way,git pullwill be executed in the/home/work/www/testdirectory after eachgit pushThe operation achieved the expected results.

I would like to ask everyone, according to the above configuration, are there any security risks or configuration loopholes?
Thanks!