Page MenuHomeDevCentral
Create Task
Maniphest T1034

Switch from root@ SSH login to sudo capabilities on every server
Closed, ResolvedPublic
Actions

Description

Currently, Eglide allows root@ SSH login.

We need to switch instead to a full passwordless sudo for wheel group.

Revisions and Commits

rOPS Nasqueron Operations
D2219rOPSe74fa7db23e0 Don't allow direct login as root through SSH
D1068rOPSd4a2340aa322 Drop wheel group configuration
D1067rOPSf3a236a7afe4 Create an ops group with full sudo capability

Related Objects
Search...

Event Timeline

dereckson created this task.Oct 25 2016, 02:32
dereckson moved this task from Backlog to Server config on the Eglide board.Jan 12 2017, 05:03
dereckson moved this task from Backlog to Eglide on the Servers board.Jan 16 2017, 08:48
dereckson mentioned this in T1194: Disable pam_nologin on Eglide.Apr 28 2017, 15:02
dereckson claimed this task.Oct 19 2017, 16:25
dereckson added a revision: D1067: Create an ops group with full sudo capability.Oct 19 2017, 16:47
dereckson added a revision: D1068: Drop wheel group configuration.Oct 19 2017, 16:54
dereckson moved this task from Eglide to Pending review on the Servers board.Oct 28 2017, 09:34
dereckson added a subtask: T1286: Eglide Salt minion doesn't respond.
dereckson added a commit: rOPSf3a236a7afe4: Create an ops group with full sudo capability.Oct 29 2017, 01:32
dereckson added a commit: rOPSd4a2340aa322: Drop wheel group configuration.Oct 29 2017, 01:36
dereckson closed subtask T1286: Eglide Salt minion doesn't respond as Resolved.Oct 29 2017, 15:41
dereckson removed dereckson as the assignee of this task.Mar 8 2018, 21:07
dereckson claimed this task.Feb 16 2020, 03:17
dereckson added a project: Operations sprints (Consolidate them all).

So, it works for two years. Let's restrict root login.

dereckson renamed this task from Switch from root@ SSH login to sudo capabilities on Eglide to Switch from root@ SSH login to sudo capabilities on every server.Feb 16 2020, 03:17
dereckson added a revision: D2219: Don't allow direct login as root through SSH.Feb 16 2020, 03:30
dereckson closed this task as Resolved.Feb 16 2020, 04:23
dereckson added a commit: rOPSe74fa7db23e0: Don't allow direct login as root through SSH.Feb 17 2020, 01:20
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator