We already have this in some sense. Most individual projects are setup under their own home directories and to administer them it is generally sufficient to have access to the individual account, not superuser access. For example the webteam manages the website without superuser access and release teams can update the ftp site generally without superuser access. So for example if someone wanted to volunteer to work on bugs.squeak.org it would probably suffice to give them access to the mantis user account.
That said the use of sudo has been brought up before and it is worth looking into. My grand plans to setup new servers included every intention of making liberal use of sudo. But I simply haven't gotten around to it. I would welcome any insights anyone has on configuring sudo for our purposes.
Ken
-------- Original Message -------- Subject: [Box-Admins] Permissions From: Chris Cunnington smalltalktelevision@gmail.com Date: Fri, February 04, 2011 2:26 pm To: box-admins@lists.squeakfoundation.org
I have a feeling that something could be done with permissions on the box. As Ken's been working alone for a long time, I imagine that the only level of permission is root. Naturally, he'd be worried about being liberal with that.
I think if a team of some sort is formed, then a three level schema of permissions could be created. People like myself could be factored into the running of the box in a way that allowed us to contributed without danger. The work could be spread around a bit.
Chris
On 02/04/2011 10:19 PM, Ken Causey wrote:
We already have this in some sense. Most individual projects are setup under their own home directories and to administer them it is generally sufficient to have access to the individual account, not superuser access. For example the webteam manages the website without superuser access and release teams can update the ftp site generally without superuser access. So for example if someone wanted to volunteer to work on bugs.squeak.org it would probably suffice to give them access to the mantis user account.
That said the use of sudo has been brought up before and it is worth looking into. My grand plans to setup new servers included every intention of making liberal use of sudo. But I simply haven't gotten around to it. I would welcome any insights anyone has on configuring sudo for our purposes.
Ken
IMHO the levels Ken describe are enough. If you are trusted with Linux admin stuff then root it is IMHO. Let's not complicate things :)
...and we really need to fix a running offsite scheduled backup. ASAP.
Sidenote: Btw, I now use Duplicity with Deja Dup on my laptop - works good even for large files onto a vfat external USB drive.
regards, Göran
Göran, can you elaborate on the backup? What are we using now and what's broken about it.
HD's fail, backups are very important. Are you saying we're not backed up right now?
thanks..
2011/2/5 Göran Krampe goran@krampe.se:
On 02/04/2011 10:19 PM, Ken Causey wrote:
We already have this in some sense. Most individual projects are setup under their own home directories and to administer them it is generally sufficient to have access to the individual account, not superuser access. For example the webteam manages the website without superuser access and release teams can update the ftp site generally without superuser access. So for example if someone wanted to volunteer to work on bugs.squeak.org it would probably suffice to give them access to the mantis user account.
That said the use of sudo has been brought up before and it is worth looking into. My grand plans to setup new servers included every intention of making liberal use of sudo. But I simply haven't gotten around to it. I would welcome any insights anyone has on configuring sudo for our purposes.
Ken
IMHO the levels Ken describe are enough. If you are trusted with Linux admin stuff then root it is IMHO. Let's not complicate things :)
...and we really need to fix a running offsite scheduled backup. ASAP.
Sidenote: Btw, I now use Duplicity with Deja Dup on my laptop - works good even for large files onto a vfat external USB drive.
regards, Göran
box-admins@lists.squeakfoundation.org