On 11/30/2017 04:04 PM, Kevin Fenzi wrote:
On 11/29/2017 11:41 AM, Matthew Miller wrote:
> On Wed, Nov 29, 2017 at 02:35:13PM -0500, Dusty Mabe wrote:
>> ask for root access. Patrick explained to me that "you're asking for
root
>> access", so yes then I said: "sure I guess i'm asking for root
access".
>> You voiced concern. To curb that I suggested sudo rules for those things
>> I asked for in the original email.
>
> Some of the things (like restarting composes) will hopefully be solved
> in the F28 timeline by the releng automation stuff we've asked to be
> prioritized.
Right.
So, this is a long thread already, but I haven't chimed in yet, so I
guess I will here.
Hey Kevin. Thanks for the response!
I agree with Patrick for the most part, but it might be good to try and
see if we automate away or make somehow easier some of these pain points
rather than just adding another person to work on them.
I'm a fan of solving the problem. I'm not tied to any particular solution :)
IOW: me requiring root is not necessary if we can solve the problems other
ways.
I agree sudo rules could restrict things, but sometimes figuring out
those rules is not at all easy, and if you can do that, you often can
script things.
Sure. There might be a theoretical way for me to break out of the sudo rules
we put in place, but if it was found that I did that it would be a good enough
reason for my access to be revoked. We also should consider that these sudo rules
shouldn't need to be hardened to the point where we are allowing anyone to
run them and thus need to prevent nefarious activity; we are talking about
one person, who has a vested interest in not hosing Fedora.
How about we grant those parts of this that were fine with Patrick (and
myself) and then see if we can more closely figure out how to fix the
rest of them or decide they can't be easily fixed and see what we can
do. Perhaps a meeting with Dusty and other folks involved sometime to
discuss them one at a time? (Although I am not sure when that would best
be... I guess in the new year).
I agree. A session where we can brainstorm on this would be awesome. Any time
works for me, but would prefer something within the next 6 weeks.
Dusty