Savannah restoration
- [X] Put services online using backup, except for password-based ones (e.g. the web interface)
- [X] Bring back web interface
- [X] Reset passwords
- [X] Fix SQL injection and look for potential others
- [X] Implement crypt support (like /etc/shadow, strong and LDAP-compatible) hashes, with SHA-512
- [X] Implement salt generation with good entropy
- [X] Implement password strength enforcement
- [/] Implement Solar's suggestions (TODO)
- [/] Implement logs-checking reporting tool (TODO: better init.d support)
- [/] Implement on-login password rehash for MD5 and improperly salted SHA-512
- Implemented rehashing for improperly salted hashes.
- [X] Implement banner to warn people about changing password (on login pages or all pages?)
- [X] Change TLS/https keys
- [/] Audit changes between the 23th and the 27th to see what was compromised - in progress http://lists.gnu.org/mailman/private/savannah-hackers-private/2010-December/002009.html
- [/] Colonialone:
- [X] move back dot files on colonialone.fsf.org
- [/] restore @savannah.gnu.org aliases replication from colo (restored user syncaliases, now check if it works)
- [X] restore user svadmin -> not restoring it since it can access nothing in the new xen setup
- [ ] Drop users ward/peobo/bernie?
- [X] Change 2 failed disks
- [/] savannah-backup:
- [X] enable backup cron
- [ ] add rsnapshot to keep history locally (rdiff seems to be too long to extract backups); coordinate with sysadmin@gnu.org so they backup the latest backup online
- [X] write post-mortem at Compromise2010
- [X] restore GAP CVS repositories from latest backup
- [X] restore avr-libc from latest backup http://savannah.gnu.org/support/?107537
- [X] fix sv.gnu.org DNSes? - in progress http://lists.gnu.org/mailman/private/savannah-hackers-private/2010-December/002007.html -- "magically works for now"
Top priority:
- Be more responsive with the project submissions; tend to 0 unassigned submissions
- SavaneTasks
Once that's done, there's still plenty fun to have: TasksList