ACLs granted in error

Tom Callaway tcallawa at redhat.com
Tue Jul 15 13:48:10 UTC 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/14/2014 11:06 AM, Ralph Bean wrote:
> The fedora-apps team identified a security hole in the new pkgdb 
> application this morning that may have inadvertently granted the 
> 'approveacls' permission to ktdreyer on the
> perl-Time-Duration-Parse package.  We do not think this was
> intentional, but was an unintentional side-effect of the software.
> 
> I have set the permission from 'Approved' back to 'Awaiting
> approval'. If ktdreyer should in fact have permissions, please set
> those back as you see fit.

I'm not terribly concerned. My perl packages are open to anyone brave
enough to go in them.

~tom

==
¸.·´¯`·.´¯`·.¸¸.·´¯`·.¸><(((º> OSAS @ Red Hat
University Outreach || Fedora Special Projects || Fedora Legal
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlPFMRoACgkQPF6ZrZMFQmBHQQCfZPmH013lJOhzJ+8MhzZIeNFl
t+IAn36iZ+H5Kk2x/MK16zrxiDmcf3S9
=OugH
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: tcallawa.vcf
Type: text/x-vcard
Size: 4 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/perl-devel/attachments/20140715/39f386a6/attachment.vcf>


More information about the perl-devel mailing list