Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] restricting access to important spells

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: seth AT swoolley.homeip.net
  • To: David Kowis <dkowis AT shlrm.org>
  • Cc: sm-discuss AT lists.ibiblio.org, Arjan Bouter <abouter AT sourcemage.org>
  • Subject: Re: [SM-Discuss] restricting access to important spells
  • Date: Thu, 13 Jul 2006 07:27:06 -0700

On Thu, Jul 13, 2006 at 07:56:16AM -0500, David Kowis wrote:
> Arjan Bouter wrote:

> > In the last couple of weeks it happened a few times that important
> > spells like linux-pam and shadow got broken by updated spells.
> > Needless to say it's annoying when I've got to fix a spell just to
> > be allowed access to my own box...
> >
> > Mathieu (lejatorn) and I were talking on #sourcemage about
> > restricting access to certain important spells to component leads
> > and a few selected devs chosen by those leads.
> > We think anything related to boot/login should get on that list of
> > spells.
> >
> > Any thoughts on this?
> >
>
> Only one. I know we keep the bar low for entry. I like that, and I think
> that's a good thing. A few patches, a bit of work in bugzilla fixing
> things and you get yourself scm access.
>
> However, something to think about. By giving those people scm access,
> we're basically allowing them indirect root shell access on every single
> SMGL box there is.
>
> This has nothing to do with the current issue, but something that's been
> nagging at the back of my mind...

That's why we send out scm diffs of edits. An open society takes risks,
but develops conventions to minimize damage.

Seth




Archive powered by MHonArc 2.6.24.

Top of Page