Re: [patch] Allow all signers to read the key to upload signed rpms

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, 10 Aug 2010 15:37:29 -0700
John Poelstra <poelstra@xxxxxxxxxx> wrote:

> It seems to me that this is a very important group.  Do we have an
> SOP that describes how this group is handled?

Not that I know of... perhaps there should be one.

> Things like:
> 
> a) What kind of "controls" do we have to make sure that the @signers 
> group is limited and that it requires some sort of approval to add 
> people to it?

No more so than any other fas group I don't think. 

> b) Who has the ability to add another person?

The admin/sponsors of the group. 
Currently jkeating is the only admin, there are no sponsors. 

> c) Are people promptly removed when they no longer need to do any
> signing?

I don't know. I would hope so. 

> d) Who has the ability to remove people?

admin/sponsor of the group?

I think if we are going to write up policies for this group, we might
also put on the same page other "important" groups. ie, sysadmin-main,
cvsadmin, possibly others? 

kevin

Attachment: signature.asc
Description: PGP signature

_______________________________________________
infrastructure mailing list
infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/infrastructure

[Index of Archives]     [Fedora Development]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [KDE Users]

  Powered by Linux