[ruby-core:121392] [Ruby Misc#21189] Canonical Git server hardening
Issue #21189 has been reported by hsbt (Hiroshi SHIBATA). ---------------------------------------- Misc #21189: Canonical Git server hardening https://bugs.ruby-lang.org/issues/21189 * Author: hsbt (Hiroshi SHIBATA) * Status: Open ---------------------------------------- I'm working hardening git.ruby-lang.org and ruby organization of GitHub in recent days. Our write grant policy is: 1. Add account name and email address of git configuration to https://github.com/ruby/git.ruby-lang.org/blob/master/config/email.yml 2. Add account name and public key to https://github.com/ruby/git.ruby-lang.org/blob/master/recipes/files/var/git/... 3. (Optional) GitHub account with 1 and 2 configuration. I found that some committers are incomplete or inconsistency configuration for Git server and GitHub. I removed write grant of GitHub repository from the following users because they didn't register `email.yml` and `authorized_keys`. ``` - luislavena - xibbar - nahi - haileys - sonots - gogotanaka - gotoyuzo - aamine ``` The following users didn't register their pubkeys into `authorized_keys`. ``` - drbrain - eban - gotoken - seki - suke - wanabe ``` The following users didn't register their mail address into `email.yml`. ``` - charliesome - dblack - emboss - funny_falcon - gogotanaka - hone - kanemoto - keiju - kosako - sonots - tarui - tmm1 - wyhaines ``` I will remove them from `email.yml` and `authorized_keys`. I will recover your account if you hope to keep write grant of our Git server and GitHub. Please send your key and mail address to https://github.com/ruby/git.ruby-lang.org/. -- https://bugs.ruby-lang.org/
Issue #21189 has been updated by hsbt (Hiroshi SHIBATA). If you can't submit pull-request to https://github.com/ruby/git.ruby-lang.org/. Please use `cvs-admin@ruby-lang.org` with your information. ---------------------------------------- Misc #21189: Canonical Git server hardening https://bugs.ruby-lang.org/issues/21189#change-112364 * Author: hsbt (Hiroshi SHIBATA) * Status: Open ---------------------------------------- I'm working hardening git.ruby-lang.org and ruby organization of GitHub in recent days. Our write grant policy is: 1. Add account name and email address of git configuration to https://github.com/ruby/git.ruby-lang.org/blob/master/config/email.yml 2. Add account name and public key to https://github.com/ruby/git.ruby-lang.org/blob/master/recipes/files/var/git/... 3. (Optional) GitHub account with 1 and 2 configuration. I found that some committers are incomplete or inconsistency configuration for Git server and GitHub. I removed write grant of GitHub repository from the following users because they didn't register `email.yml` and `authorized_keys`. ``` - luislavena - xibbar - nahi - haileys - sonots - gogotanaka - gotoyuzo - aamine ``` The following users didn't register their pubkeys into `authorized_keys`. ``` - drbrain - eban - gotoken - seki - suke - wanabe ``` The following users didn't register their mail address into `email.yml`. ``` - charliesome - dblack - emboss - funny_falcon - gogotanaka - hone - kanemoto - keiju - kosako - sonots - tarui - tmm1 - wyhaines ``` I will remove them from `email.yml` and `authorized_keys`. I will recover your account if you hope to keep write grant of our Git server and GitHub. Please send your key and mail address to https://github.com/ruby/git.ruby-lang.org/. -- https://bugs.ruby-lang.org/
Issue #21189 has been updated by hsbt (Hiroshi SHIBATA). Status changed from Open to Assigned Assignee set to hsbt (Hiroshi SHIBATA) ---------------------------------------- Misc #21189: Canonical Git server hardening https://bugs.ruby-lang.org/issues/21189#change-112366 * Author: hsbt (Hiroshi SHIBATA) * Status: Assigned * Assignee: hsbt (Hiroshi SHIBATA) ---------------------------------------- I'm working hardening git.ruby-lang.org and ruby organization of GitHub in recent days. Our write grant policy is: 1. Add account name and email address of git configuration to https://github.com/ruby/git.ruby-lang.org/blob/master/config/email.yml 2. Add account name and public key to https://github.com/ruby/git.ruby-lang.org/blob/master/recipes/files/var/git/... 3. (Optional) GitHub account with 1 and 2 configuration. I found that some committers are incomplete or inconsistency configuration for Git server and GitHub. I removed write grant of GitHub repository from the following users because they didn't register `email.yml` and `authorized_keys`. ``` - luislavena - xibbar - nahi - haileys - sonots - gogotanaka - gotoyuzo - aamine ``` The following users didn't register their pubkeys into `authorized_keys`. ``` - drbrain - eban - gotoken - seki - suke - wanabe ``` The following users didn't register their mail address into `email.yml`. ``` - charliesome - dblack - emboss - funny_falcon - gogotanaka - hone - kanemoto - keiju - kosako - sonots - tarui - tmm1 - wyhaines ``` I will remove them from `email.yml` and `authorized_keys`. I will recover your account if you hope to keep write grant of our Git server and GitHub. Please send your key and mail address to https://github.com/ruby/git.ruby-lang.org/. -- https://bugs.ruby-lang.org/
participants (1)
-
hsbt (Hiroshi SHIBATA)