fatal: detected dubious ownership in repository at '/srv/db.torproject.org/keyrings/keyring.git'
This is happening again (#41024 (closed), #41052 (closed)):
$ mr checkout account-keyring
mr checkout: /home/user/proj/tor/tpa/repos/account-keyring
Cloning into 'account-keyring'...
fatal: detected dubious ownership in repository at '/srv/db.torproject.org/keyrings/keyring.git'
To add an exception for this directory, call:
git config --global --add safe.directory /srv/db.torproject.org/keyrings/keyring.git
fatal: Could not read from remote repository.
Please make sure you have the correct access rights
and the repository exists.
mr checkout: command failed
mr checkout: finished (1 failed; 29 skipped)
I believe it's because of git-2.39.5-0+deb12u1 (accepted on stable on 2024-09-13) which contains a fix for:
* CVE-2024-32004:
Repositories can be configured to execute arbitrary code during local
clones. To address this, the ownership checks introduced in v2.30.3
are now extended to cover cloning local repositories.