From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 31781 invoked by alias); 6 Feb 2020 16:46:58 -0000 Mailing-List: contact overseers-help@sourceware.org; run by ezmlm Precedence: bulk List-Id: List-Archive: List-Post: List-Help: , Sender: overseers-owner@sourceware.org Received: (qmail 31773 invoked by uid 89); 6 Feb 2020 16:46:57 -0000 Authentication-Results: sourceware.org; auth=none X-Spam-SWARE-Status: No, score=-99.6 required=5.0 tests=AWL,BAYES_00,FORGED_SPF_HELO,KHOP_HELO_FCRDNS,SPF_HELO_PASS,SPF_NEUTRAL,USER_IN_WHITELIST autolearn=no version=3.3.1 spammy=cgf, Our, our X-HELO: cgf.cx Received: from external.cgf.cx (HELO cgf.cx) (107.170.62.102) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Thu, 06 Feb 2020 16:46:56 +0000 DKIM-Filter: OpenDKIM Filter v2.11.0 cgf.cx 02380404AA X-Spam-CGF-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00 autolearn=ham autolearn_force=no version=3.4.3 spammy=H*r:unknown, H*ct:us-ascii, H*M:cgf, exposure Received: from ednor.cgf.cx (unknown [100.0.105.127]) by cgf.cx (Postfix) with ESMTPA; Thu, 6 Feb 2020 11:46:52 -0500 (EST) Received: by ednor.cgf.cx (sSMTP sendmail emulation); Thu, 06 Feb 2020 11:46:52 -0500 Date: Thu, 06 Feb 2020 16:46:00 -0000 From: Christopher Faylor To: Carlos O'Donell Cc: "Frank Ch. Eigler" , overseers@sourceware.org, Florian Weimer Subject: Re: Choice of distribution for new sourceware.org server? Message-ID: <20200206164652.GA15907@cgf.cx> Mail-Followup-To: Carlos O'Donell , "Frank Ch. Eigler" , overseers@sourceware.org, Florian Weimer References: <74e963de-f7c8-33d0-d133-ada427c000a4@redhat.com> <20200206013050.GA16275@cgf.cx> <20200206013405.GC97355@elastic.org> <20200206020237.GD97355@elastic.org> <20200206144908.GG97355@elastic.org> <177b7cdc-bf88-a004-6f3d-9fb4c8a65da7@redhat.com> <20200206151900.GA24071@elastic.org> <89f0e5ec-2b85-5ae8-3bed-efc812b2b9e1@redhat.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <89f0e5ec-2b85-5ae8-3bed-efc812b2b9e1@redhat.com> User-Agent: Mutt/1.5.20 (2009-06-14) X-SW-Source: 2020-q1/txt/msg00076.txt On Thu, Feb 06, 2020 at 11:36:33AM -0500, Carlos O'Donell wrote: >On 2/6/20 10:19 AM, Frank Ch. Eigler wrote: >>> This would also allow us to restrict shell access to only those that >>> ask for it and thus limit our security exposure (best practice). >> >> Our shell access is already restricted. > >Can non-administrators login to the system via ssh? Why? non-administrators can't login to the system. That's what Frank means by "Our shell access is already restricted". cgf