fatal: detected dubious ownership in repository at '/srv/db.torproject.org/keyrings/keyring.git'
This is happening again (#41024, #41052): ```shell $ mr checkout account-keyring mr checkout: /home/user/proj/tor/tpa/repos/account-keyring Cloning into 'account-keyring'... fatal: detected dubious ownership in repository at '/srv/db.torproject.org/keyrings/keyring.git' To add an exception for this directory, call: git config --global --add safe.directory /srv/db.torproject.org/keyrings/keyring.git fatal: Could not read from remote repository. Please make sure you have the correct access rights and the repository exists. mr checkout: command failed mr checkout: finished (1 failed; 29 skipped) ``` I believe it's because of [git-2.39.5-0+deb12u1](https://tracker.debian.org/news/1565295/accepted-git-12395-0deb12u1-source-into-stable-security/) (accepted on stable on 2024-09-13) which [contains a fix](https://github.com/git/git/blob/master/Documentation/RelNotes/2.39.4.txt#L19) for: ``` * CVE-2024-32004: Repositories can be configured to execute arbitrary code during local clones. To address this, the ownership checks introduced in v2.30.3 are now extended to cover cloning local repositories. ```
issue