[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: rawhide, /mnt/koji and /pub/fedora



Nigel Jones wrote:
On Wed, 2008-08-27 at 21:52 -0700, Jesse Keating wrote:
On Wed, 2008-08-27 at 21:44 -0700, Jesse Keating wrote:
Comments?
One comment just made on IRC by G:

<G> f13: can't be allow masher to sudo to ftpsync and run a sync
command?

G = $me :)
We would have to allow masher to sudo with no password in order to run
the rsync command.  I'm not sure how far we can narrow it down since the
rsync source changes each day, only the dest (and other options) remain
the same.
Why not something like:

sudo /usr/local/bin/rawhideftpsync.sh <random bit>
that runs: rsync ...<normal path>.<random bit> ...

Just a thought.

You could configure sudoers to allow the masher user to only be able to execute whatever it sudo's as the ftpsync user:

masher hostname.domain.tld=(ftpsync) NOPASSWD: rsync $rsync_opts foo.<wildcardmatch-source> bar

Does that narrow it down sufficiently?

Kind regards,

Jeroen van Meeuwen
-kanarip


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]