[tor-bugs] #33537 [Internal Services/Tor Sysadmin Team]: audit SVN accesses

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Mar 5 17:58:24 UTC 2020


#33537: audit SVN accesses
-------------------------------------------------+-------------------------
     Reporter:  anarcat                          |      Owner:  tpa
         Type:  task                             |     Status:  new
     Priority:  Very High                        |  Milestone:
    Component:  Internal Services/Tor Sysadmin   |    Version:
  Team                                           |   Keywords:  tpa-
     Severity:  Major                            |  roadmap-march
Actual Points:                                   |  Parent ID:  #17202
       Points:                                   |   Reviewer:
      Sponsor:                                   |
-------------------------------------------------+-------------------------
 one of things that came out of the SVN retirement discussion is that we
 don't exactly know how to tell who has access to what. we hope that access
 controls are correct and tight, but that institutional knowledge somewhat
 bitrotten over the years, so we can't easily tell.

 the task is to figure out exactly which set of users has access to which
 files.

 this is in the context that the SVN service will be eventually retired,
 but we have hit a roadblock in the corpsvn retirement (#32025) where there
 are concerns about where to move the files to. so while we resolve those
 concerns, we will keep hosting corpsvn for a little longer and that means
 cleaning up the accesses.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33537>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list