[Labs-l] IMPORTANT: Changing the handling of groups, which means group names will change
Ryan Lane
rlane32 at gmail.com
Fri Apr 13 03:37:51 UTC 2012
See: https://bugzilla.wikimedia.org/show_bug.cgi?id=35874
There's a problem with how we currently name groups directly after
projects. If a project has a name that is the same as a system group,
it causes issues. This can also have security issues. For instance, if
a project is named "root", then members of that project would also
exist in the root group on other projects they are a member of.
So, to work around this issue, we'll be prefixing all group names with
"project-". If you rely on project group names, you should adjust your
configuration and/or scripts for this change. In puppet you can
reference the project's group via the $projectgroup variable.
- Ryan
More information about the Labs-l
mailing list