Re: Who replaced ~builder/.ssh/authorized_keys? (Was: Autobuilder results)

[Steffen Joeris <steffen.joeris@skolelinux.de>]

On Wed, 22 Jul 2009 09:32:49 pm Holger Levsen wrote:
> Hi,
>
> On Mittwoch, 22. Juli 2009, Petter Reinholdtsen wrote:
> > This was caused by someone replacing the ssh keys of the builder user,
> > removing the builder users ssh keys and only inserting this key:
>
> WTF?!
>
> > Who did this?  Why?
>
> I still like to know, else I would consider the machine compromised.
As discussed on IRC, this might have happened, when I added Daniel's key.
All drift members had access to the builder user, they can give themselves 
access. Apart from that Daniel had been given access and I am not sure about 
others, but there weren't many. If you had access as well, we can add you 
again.

Cheers
Steffen