Respository vandalism by root at ...fd.o

[Dave Airlie]

On Wed, Nov 24, 2010 at 10:37 AM, Frans de Boer <frans at fransdb.nl> wrote:
> On 11/24/2010 01:24 AM, Adam Jackson wrote:
>
> On Tue, 2010-11-23 at 13:32 +0100, Luc Verhaegen wrote:
>
>
> Radeonhd repo:
> http://cgit.freedesktop.org/xorg/driver/xf86-video-radeonhd/commit/?h=spigot
>
> author	SPIGOT <root at jerkcity.com>	2010-11-02 04:21:14 (GMT)
> committer	SPIGOT <root at jerkcity.com>	2010-11-02 04:21:14 (GMT)
> commit	231683e2f111bb064125f64f2da797d744cde7fa (patch)
> ...
> PERHAPS BONGHITS WILL FIX MY MAKEFILE
> Signed-off-by: SPIGOT <root at jerkcity.com>
>
> Very funny, but the person responsible forgot that maybe, this puts the
> whole trust in anything on fd.o at risk.
>
>
> That was me.  Serious lapse in judgement on my part.  I pretty much did
> it to get a rise out of Luc; looks like I succeeded.  But it's
> indefensible, and I apologize.  I'm kind of in a bad place emotionally
> and I should know better than to act that out in public.
>
> I've disabled my root accounts on the fd.o machines.  I don't trust me
> with them anymore either.
>
> - ajax
>
>
> _______________________________________________
> xorg at lists.freedesktop.org: X.Org support
> Archives: http://lists.freedesktop.org/archives/xorg
> Info: http://lists.freedesktop.org/mailman/listinfo/xorg
> Your subscription address: frans at fransdb.nl
>
> Thanks Adam,
>
> Because of my unfamiliarity with the people involved with xorg, can anybody
> verify the claim Adam made?
> If it was just a misplaced competition effort, I can continue to rely on the
> xorg code.
> Also, if it turns out to be a validated claim Adam made, accept it as is and
> continue. Hopefully Adam has learned his lesson. But also Freedesktop.org
> should have it's act together. Do check the access rights and allow only
> trusted persons root access. Hopefully Adam was NOT one of them they trusted
> explicitly and he has only access due to historical reasons.

Yes, and not sure about the rest. Freedesktop isn't some sort of paid
organisation here, you have a group of volunteers running some
machines tied together with a lot of bailing twine. It only recently
through the good graces of Collabora that fd.o got some paid
administration time directed at it at all (Tollef). Like we could
migrate all the stuff to machines that X.org control but we'd end up
with the same problems + another set of problems.

Adam still does a lot of a/c maintenance for X.org and other projects,
these will now be have to be done by part-time admin which means even
longer delays on new a/cs. There is a major fd.o overhaul in the works
and maybe Tollef can provide some insight into it when he has time.

Dave.