[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: AM report for Andree Leidenfrost



On Wed, 2005-12-21 at 11:58 +0100, Adrian von Bidder wrote:
> Before: one DAM.
> Now: two DAM.
> 
> Sounds like an improvement to me.

From what I've heard, we don't have two active DAMs who work in
parallel. That might be outdated of course.

> Giving somebody root accounts on all Debian project machines is not lightly 
> done, so I can understand that we don't have a 20-people DAM committee.

We have 900+ developers, so finding around 3-4 people which we grant
that privilege shouldn't be that hard. We already trust 900 people with
root shells on every Debian machine (this is often used in discussions
around NM), so we should be able to trust a few more than one (or two)
people with root on our own machines, right?

And even if you think that'd be a problem (which I don't), I think it
might be possible to implement the account creation in such a way that
DAM members can create regular-DD accounts, but that they can't add
superuser accounts or elevate regular accounts. With an LDAP system,
such a thing should at least in theory be possible, but I don't know the
implementation specifics though.


Thijs

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: