Remove PublicDir permission
Outside of tests, PublicDir permission is used in two locations:
- Quarantine directories are marked PublicDir.
-
custom_hooks/
directories are marked PublicDir.
Quarantines are internal runtime state of Gitaly and don't need to be readable by others. Custom hooks directories in the repositories also shouldn't need to be accessible by anything but Gitaly.
Replace the usage of PublicDir with the standard storage permissions.
Related to Standardize file system permissions across Gitaly (#6206 - closed)
Edited by Sami Hiltunen