On Wed, Dec 08, 2010 at 03:35:54PM +0100, Jim Meyering wrote: > Brian Gough wrote: > > This patch notifies the user by email when any new ssh keys are added > > to their account through the web interface. > > > > This would make it more difficult for any intruders to get access to > > the repositories without being discovered. > > > > From 087f9988959dd50c29de10a9e9be3896ce8189dd Mon Sep 17 00:00:00 2001 > > From: Brian Gough <b...@gnu.org> > > Date: Wed, 8 Dec 2010 10:43:36 +0000 > > Subject: [PATCH] notify the user by email on change of ssh keys > > Good idea. Thanks!
I applied the patch, and did a similar notification at the system level -- if the web interface is compromised, the attacker may just block the notifications. http://git.savannah.gnu.org/cgit/savane-cleanup.git/commit/?id=33d227c2c6d90c77a57f42d2bb6d00d2f4e4e420 http://git.savannah.gnu.org/cgit/savane-cleanup.git/commit/?id=91a0400e1fc5efe1b22843de871ab5e5459c2b7a -- Sylvain
