[ruby-core:121393] [Ruby Misc#21189] Canonical Git server hardening
From:
"hsbt (Hiroshi SHIBATA) via ruby-core" <ruby-core@...>
Date:
2025-03-18 03:49:13 UTC
List:
ruby-core #121393
Issue #21189 has been updated by hsbt (Hiroshi SHIBATA). If you can't submit pull-request to https://github.com/ruby/git.ruby-lang.org/. Please use `cvs-admin@ruby-lang.org` with your information. ---------------------------------------- Misc #21189: Canonical Git server hardening https://bugs.ruby-lang.org/issues/21189#change-112364 * Author: hsbt (Hiroshi SHIBATA) * Status: Open ---------------------------------------- I'm working hardening git.ruby-lang.org and ruby organization of GitHub in recent days. Our write grant policy is: 1. Add account name and email address of git configuration to https://github.com/ruby/git.ruby-lang.org/blob/master/config/email.yml 2. Add account name and public key to https://github.com/ruby/git.ruby-lang.org/blob/master/recipes/files/var/git/.ssh/authorized_keys 3. (Optional) GitHub account with 1 and 2 configuration. I found that some committers are incomplete or inconsistency configuration for Git server and GitHub. I removed write grant of GitHub repository from the following users because they didn't register `email.yml` and `authorized_keys`. ``` - luislavena - xibbar - nahi - haileys - sonots - gogotanaka - gotoyuzo - aamine ``` The following users didn't register their pubkeys into `authorized_keys`. ``` - drbrain - eban - gotoken - seki - suke - wanabe ``` The following users didn't register their mail address into `email.yml`. ``` - charliesome - dblack - emboss - funny_falcon - gogotanaka - hone - kanemoto - keiju - kosako - sonots - tarui - tmm1 - wyhaines ``` I will remove them from `email.yml` and `authorized_keys`. I will recover your account if you hope to keep write grant of our Git server and GitHub. Please send your key and mail address to https://github.com/ruby/git.ruby-lang.org/. -- https://bugs.ruby-lang.org/ ______________________________________________ ruby-core mailing list -- ruby-core@ml.ruby-lang.org To unsubscribe send an email to ruby-core-leave@ml.ruby-lang.org ruby-core info -- https://ml.ruby-lang.org/mailman3/lists/ruby-core.ml.ruby-lang.org/