On Thu, Aug 4, 2011 at 09:07, Kevin Fenzi <kevin@xxxxxxxxx> wrote: > Greetings. > > Two items I'd like some feedback on... > > 1. Would there be any downsides to switching sysadmin-qa over to > requiring just 'cla_done' instead of sysadmin? The QA admins get > seperate nagios emails to sysadmin-qa on their machines, and don't use > our puppet so they don't care about commit emails. Is there some other > reason sysadmin needs to be a requirement for sysadmin-$foo groups? I think we will need to get Toshio and Mike to go in on this. I don't know if there is particular fas logic that happens also. To me the bigger question is.. do we need to have the root emails going to sysadmin or to a subgroup. If those emails go down to say sysadmin-noc,fi-apprentice,sysadmin-main,sysadmin-hosted it would do the same thing. > 2. I'd like to allow apprentice folks to look at logs on log02. > Currently this is just sysadmin-main and -noc. Can anyone think of > anything we log that might be too sensitive for this? We shouldn't be > logging any passwords (although I can look). I'd also like to make sure > all the logs on log02 are ro to everyone (but main). Currently many of > the directories there are writable for sysadmin group, which seems > wrong to me. Passwords creep into the logs every now and then. The usual is that someone tries to login with their password. Sorry about the write on group, I thought i fixed that a while ago. > Thoughts? Concerns? Stories? > > kevin > > _______________________________________________ > infrastructure mailing list > infrastructure@xxxxxxxxxxxxxxxxxxxxxxx > https://admin.fedoraproject.org/mailman/listinfo/infrastructure > -- Stephen J Smoogen. "The core skill of innovators is error recovery, not failure avoidance." Randy Nelson, President of Pixar University. "Let us be kind, one to another, for most of us are fighting a hard battle." -- Ian MacLaren _______________________________________________ infrastructure mailing list infrastructure@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/infrastructure
