On Monday, 28 December 2020 at 03:38, Kevin Fenzi wrote:
On Sun, Dec 27, 2020 at 06:43:23PM -0700, Ken Dreyer wrote:
> On Thu, Dec 24, 2020 at 12:33 AM Dridi Boukelmoune
> <dridi.boukelmoune(a)gmail.com> wrote:
> >
> > > The weakest point in the current system is really the FAS password. If
> > > you have a packager's FAS password you can change the ssh key
> > > associated with the account to another that you control, and the FAS
> > > password is also all you need to run a build and submit it to Bodhi.
> >
> > Or you add an SSH key without removing the maintainer's keys on the
> > off chance that it would go unnoticed...
>
> From what I can tell, the current implementation of FAS does not allow
> more than one SSH key per user account.
You can add more than one. Just put them in a file and upload all of
them for 'ssh key' one key per line. There's a limit based on
applications getting the ssh keys, but you can upload multiple keys
fine.
Is that documented somewhere? I was also under the impression that only
one key was permitted.
Regards,
Dominik
--
Fedora
https://getfedora.org | RPM Fusion
http://rpmfusion.org
There should be a science of discontent. People need hard times and
oppression to develop psychic muscles.
-- from "Collected Sayings of Muad'Dib" by the Princess Irulan