[CentOS-devel] Adding geo distributed builder hardware for cbs.centos.org

Howard Johnson merlin at mwob.org.uk
Tue Aug 11 10:44:23 UTC 2015


On 11/08/2015 02:28, Nico Kadel-Garcia wrote:
> Please tell me it's at least an NFSv4 share and mount, with Kerberized 
> authentication? I've had some difficulty explaing to some of my 
> colleagues for the last 20 years that NFS shares present some real 
> security issues without tight user and environmental control. If I 
> find one more set of Subversion or passphrase free SSH or LDAP 
> credentials in a plain-text, shared home directory I'm going to. well, 
> get paid for cleaning up the mess. But it wastes time cleaning up 
> security as an afterthought. 

I've no idea.  I'd imagine Fedora's infra counts as "tight user and 
environmental control", though.  I'm also not sure it's really any of 
our concern.

-- 
HJ


More information about the CentOS-devel mailing list