logs and emails

[Stephen John Smoogen]

On Thu, Aug 4, 2011 at 09:07, Kevin Fenzi <kevin at scrye.com> wrote:
> Greetings.
>
> Two items I'd like some feedback on...
>
> 1. Would there be any downsides to switching sysadmin-qa over to
> requiring just 'cla_done' instead of sysadmin? The QA admins get
> seperate nagios emails to sysadmin-qa on their machines, and don't use
> our puppet so they don't care about commit emails. Is there some other
> reason sysadmin needs to be a requirement for sysadmin-$foo groups?

I think we will need to get Toshio and Mike to go in on this. I don't
know if there is particular fas logic that happens also. To me the
bigger question is.. do we need to have the root emails going to
sysadmin or to a subgroup. If those emails go down to say
sysadmin-noc,fi-apprentice,sysadmin-main,sysadmin-hosted it would do
the same thing.

> 2. I'd like to allow apprentice folks to look at logs on log02.
> Currently this is just sysadmin-main and -noc. Can anyone think of
> anything we log that might be too sensitive for this? We shouldn't be
> logging any passwords (although I can look). I'd also like to make sure
> all the logs on log02 are ro to everyone (but main). Currently many of
> the directories there are writable for sysadmin group, which seems
> wrong to me.

Passwords creep into the logs every now and then. The usual is that
someone tries to login with their password. Sorry about the write on
group, I thought i fixed that a while ago.

> Thoughts? Concerns? Stories?
>
> kevin
>
> _______________________________________________
> infrastructure mailing list
> infrastructure at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/infrastructure
>



-- 
Stephen J Smoogen.
"The core skill of innovators is error recovery, not failure avoidance."
Randy Nelson, President of Pixar University.
"Let us be kind, one to another, for most of us are fighting a hard
battle." -- Ian MacLaren