diff doc/hgrc.5.txt @ 3551:3b07e223534b

Only read .hg/hgrc files from trusted users/groups

The list of trusted users and groups is specified in the [trusted]
section of a hgrc; the current user is always trusted; "*" can be
used to trust all users/groups.

Global hgrc files are always read.

On Windows (and other systems that don't have the pwd and grp modules),
all .hg/hgrc files are read.

This is essentially the same patch that was previously applied as
revision 494521a3f142.

--- a/doc/hgrc.5.txt	Thu Oct 26 10:06:12 2006 -0700
+++ b/doc/hgrc.5.txt	Thu Oct 26 19:25:44 2006 +0200
@@ -50,6 +50,8 @@
     particular repository.  This file is not version-controlled, and
     will not get transferred during a "clone" operation.  Options in
     this file override options in all other configuration files.
+    On Unix, this file is only read if it belongs to a trusted user
+    or to a trusted group.
 
 SYNTAX
 ------
@@ -364,6 +366,17 @@
     6Mbps), uncompressed streaming is slower, because of the extra
     data transfer overhead.  Default is False.
 
+trusted::
+  Mercurial will only read the .hg/hgrc file from a repository if
+  it belongs to a trusted user or to a trusted group.  This section
+  specifies what users and groups are trusted.  The current user is
+  always trusted.  To trust everybody, list a user or a group with
+  name "*".
+  users;;
+    Comma-separated list of trusted users.
+  groups;;
+    Comma-separated list of trusted groups.
+
 ui::
   User interface controls.
   debug;;