--- /dev/null
+Return-Path: <bremner@tethera.net>\r
+X-Original-To: notmuch@notmuchmail.org\r
+Delivered-To: notmuch@notmuchmail.org\r
+Received: from localhost (localhost [127.0.0.1])\r
+ by olra.theworths.org (Postfix) with ESMTP id DB7BD431FC0\r
+ for <notmuch@notmuchmail.org>; Sat, 12 Apr 2014 09:30:55 -0700 (PDT)\r
+X-Virus-Scanned: Debian amavisd-new at olra.theworths.org\r
+X-Spam-Flag: NO\r
+X-Spam-Score: 0\r
+X-Spam-Level: \r
+X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[none]\r
+ autolearn=disabled\r
+Received: from olra.theworths.org ([127.0.0.1])\r
+ by localhost (olra.theworths.org [127.0.0.1]) (amavisd-new, port 10024)\r
+ with ESMTP id yEqMccvJCYd7 for <notmuch@notmuchmail.org>;\r
+ Sat, 12 Apr 2014 09:30:51 -0700 (PDT)\r
+Received: from yantan.tethera.net (yantan.tethera.net [199.188.72.155])\r
+ (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits))\r
+ (No client certificate requested)\r
+ by olra.theworths.org (Postfix) with ESMTPS id 0E409431FC3\r
+ for <notmuch@notmuchmail.org>; Sat, 12 Apr 2014 09:30:51 -0700 (PDT)\r
+Received: from remotemail by yantan.tethera.net with local (Exim 4.80)\r
+ (envelope-from <bremner@tethera.net>)\r
+ id 1WZ0pM-0004Ow-JE; Sat, 12 Apr 2014 13:30:48 -0300\r
+Received: (nullmailer pid 5173 invoked by uid 1000); Sat, 12 Apr 2014\r
+ 16:30:44 -0000\r
+From: David Bremner <david@tethera.net>\r
+To: notmuch@notmuchmail.org\r
+Subject: [PATCH] nmbug: mark repository as bare on clone\r
+Date: Sat, 12 Apr 2014 13:30:32 -0300\r
+Message-Id: <1397320232-32458-1-git-send-email-david@tethera.net>\r
+X-Mailer: git-send-email 1.9.1\r
+X-BeenThere: notmuch@notmuchmail.org\r
+X-Mailman-Version: 2.1.13\r
+Precedence: list\r
+List-Id: "Use and development of the notmuch mail system."\r
+ <notmuch.notmuchmail.org>\r
+List-Unsubscribe: <http://notmuchmail.org/mailman/options/notmuch>,\r
+ <mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>\r
+List-Archive: <http://notmuchmail.org/pipermail/notmuch>\r
+List-Post: <mailto:notmuch@notmuchmail.org>\r
+List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>\r
+List-Subscribe: <http://notmuchmail.org/mailman/listinfo/notmuch>,\r
+ <mailto:notmuch-request@notmuchmail.org?subject=subscribe>\r
+X-List-Received-Date: Sat, 12 Apr 2014 16:30:56 -0000\r
+\r
+As far as I can figure out, if a git repository is non-bare, then it\r
+should either have core.worktree set, or the parent directory should\r
+be the worktree. Since the parent directory is usually the user's home\r
+directory, we don't want that. Although unlikely to be typed by\r
+mistake\r
+\r
+% cd $HOME && ln -s .nmbug .git && git reset --hard\r
+\r
+would delete a bunch of files.\r
+---\r
+\r
+Hah, I managed to escalate a documentation quibble into a\r
+sortof-security issue.\r
+\r
+ devel/nmbug/nmbug | 1 +\r
+ 1 file changed, 1 insertion(+)\r
+\r
+diff --git a/devel/nmbug/nmbug b/devel/nmbug/nmbug\r
+index d6f5213..b18ded7 100755\r
+--- a/devel/nmbug/nmbug\r
++++ b/devel/nmbug/nmbug\r
+@@ -134,6 +134,7 @@ sub do_clone {\r
+ $repository, $tempwork) == 0\r
+ or die "'git clone' exited with nonzero value\n";\r
+ git ('config', '--unset', 'core.worktree');\r
++ git ('config', 'core.bare', 'true');\r
+ }\r
+ \r
+ sub is_committed {\r
+-- \r
+1.9.1\r
+\r