[Savannah-hackers-public] Re: [PATCH] notify the user by email on change of ssh keys

[Sylvain Beucler]

On Wed, Dec 08, 2010 at 03:35:54PM +0100, Jim Meyering wrote:
> Brian Gough wrote:
> > This patch notifies the user by email when any new ssh keys are added
> > to their account through the web interface.
> >
> > This would make it more difficult for any intruders to get access to
> > the repositories without being discovered.
> >
> > From 087f9988959dd50c29de10a9e9be3896ce8189dd Mon Sep 17 00:00:00 2001
> > From: Brian Gough <address@hidden>
> > Date: Wed, 8 Dec 2010 10:43:36 +0000
> > Subject: [PATCH] notify the user by email on change of ssh keys
> 
> Good idea.  Thanks!

I applied the patch, and did a similar notification at the system
level -- if the web interface is compromised, the attacker may just
block the notifications.
http://git.savannah.gnu.org/cgit/savane-cleanup.git/commit/?id=33d227c2c6d90c77a57f42d2bb6d00d2f4e4e420
http://git.savannah.gnu.org/cgit/savane-cleanup.git/commit/?id=91a0400e1fc5efe1b22843de871ab5e5459c2b7a

-- 
Sylvain