| 1 2 3 4 5 6 7 8 9 10 11 12 13 14 | ||
|
Editor: Beuc
Time: 2010/12/26 12:23:38 GMT+0 |
||
| Note: update completion status | ||
changed: - * ![ ] Implement Solar's suggestions (`TODO <http://lists.gnu.org/mailman/private/savannah-hackers-private/2010-December/001984.html>`_) * ![/] Implement Solar's suggestions (`TODO <http://lists.gnu.org/mailman/private/savannah-hackers-private/2010-December/001984.html>`_) changed: - * ![ ] Change TLS/https keys * ![X] Change TLS/https keys changed: - * ![ ] Colonialone: - * ![ ] move back dot files on colonialone.fsf.org - * ![ ] restore @savannah.gnu.org aliases replication from colo - * ![ ] restore user svadmin * ![/] Colonialone: * ![X] move back dot files on colonialone.fsf.org * ![/] restore @savannah.gnu.org aliases replication from colo (restored user syncaliases, now check if it works) * ![X] restore user svadmin -> not restoring it since it can access nothing in the new xen setup * ![ ] Drop users ward/peobo/bernie? * ![X] Change 2 failed disks changed: - * ![ ] restore GAP CVS repositories from latest backup - * ![ ] restore avr-libc from latest backup http://savannah.gnu.org/support/?107537 - * ![/] fix sv.gnu.org DNSes - in progress http://lists.gnu.org/mailman/private/savannah-hackers-private/2010-December/002007.html * ![X] restore GAP CVS repositories from latest backup * ![X] restore avr-libc from latest backup http://savannah.gnu.org/support/?107537 * ![X] fix sv.gnu.org DNSes - in progress http://lists.gnu.org/mailman/private/savannah-hackers-private/2010-December/002007.html -- "magically works for now"
- [X] Put services online using backup, except for password-based ones (e.g. the web interface)
- [X] Bring back web interface
- [X] Reset passwords
- [X] Fix SQL injection and look for potential others
- [X] Implement crypt support (like /etc/shadow, strong and LDAP-compatible) hashes, with SHA-512
- [X] Implement salt generation with good entropy
- [X] Implement password strength enforcement
- [/] Implement Solar's suggestions (TODO)
- [/] Implement logs-checking reporting tool (TODO: better init.d support)
- [/] Implement on-login password rehash for MD5 and improperly salted SHA-512
- Implemented rehashing for improperly salted hashes.
- [X] Implement banner to warn people about changing password (on login pages or all pages?)
- [X] Change TLS/https keys
- [/] Audit changes between the 23th and the 27th to see what was compromised - in progress http://lists.gnu.org/mailman/private/savannah-hackers-private/2010-December/002009.html
- [/] Colonialone:
- [X] move back dot files on colonialone.fsf.org
- [/] restore @savannah.gnu.org aliases replication from colo (restored user syncaliases, now check if it works)
- [X] restore user svadmin -> not restoring it since it can access nothing in the new xen setup
- [ ] Drop users ward/peobo/bernie?
- [X] Change 2 failed disks
- [/] savannah-backup:
- [X] enable backup cron
- [ ] add rsnapshot to keep history locally (rdiff seems to be too long to extract backups); coordinate with sysadmin@gnu.org so they backup the latest backup online
- [X] write post-mortem at Compromise2010
- [X] restore GAP CVS repositories from latest backup
- [X] restore avr-libc from latest backup http://savannah.gnu.org/support/?107537
- [X] fix sv.gnu.org DNSes? - in progress http://lists.gnu.org/mailman/private/savannah-hackers-private/2010-December/002007.html -- "magically works for now"
Top priority:
Once that's done, there's still plenty fun to have: TasksList