Re: ACLs granted in error

2014-08-13 Thread Ken Dreyer
Thanks a lot for clarifying, Ralph. I was wondering what was going on there. - Ken On Mon, Jul 14, 2014 at 9:06 AM, Ralph Bean rb...@redhat.com wrote: The fedora-apps team identified a security hole in the new pkgdb application this morning that may have inadvertently granted the

ACLs granted in error

2014-07-15 Thread Ralph Bean
The fedora-apps team identified a security hole in the new pkgdb application this morning that may have inadvertently granted the 'approveacls' permission to ktdreyer on the perl-Time-Duration-Parse package. We do not think this was intentional, but was an unintentional side-effect of the

Re: ACLs granted in error

2014-07-15 Thread Tom Callaway
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/14/2014 11:06 AM, Ralph Bean wrote: The fedora-apps team identified a security hole in the new pkgdb application this morning that may have inadvertently granted the 'approveacls' permission to ktdreyer on the perl-Time-Duration-Parse