FAD Infrastructure Security 2012

From FedoraProject

(Difference between revisions)
Jump to: navigation, search
(Update a bit more)
(Detailed Work Items & Final Attendees)
Line 68: Line 68:
 
== Detailed Work Items & Final Attendees ==
 
== Detailed Work Items & Final Attendees ==
  
[[FAD_Infrastructure_Security_2012/attendees | Attendees]]
+
[[FAD_Infrastructure_Security_2012#Attendees | Attendees]]
  
 
People needed to get primary objective done:  
 
People needed to get primary objective done:  
Line 82: Line 82:
 
* Rel-eng - signing server security, cert rework. dgilmore.  
 
* Rel-eng - signing server security, cert rework. dgilmore.  
  
* Other folks who know IDSes, git commit signing, etc.  
+
* Other folks who know IDSes, git commit signing, etc.
 +
 
 +
=== Attendees ===
 +
 
 +
The table should be pretty self-explanatory.
 +
 
 +
{| class="wikitable"
 +
|-
 +
! FAS Username !! Real Name !! Preferred Dates !! Preferred Location !! Approx. Airfare Cost (in USD) to Preferred Location !! Secondary Location !! Approx. Airfare Cost (in USD) to Secondary Location !! notes
 +
|-
 +
| kevin || Kevin Fenzi || RDU probibly || After f18 makes the most sense to me now || ~300-350 || Westford || ~300-350 ||
 +
|-
 +
| codeblock || Ricky Elrod || Before the last two weeks of August (due to semester starting) || RDU, but doesn't matter to me || ~$320 || Westford || ~$312 || The airfare costs I listed were for two days (e.g. leaving on Aug. 10 and returning on Aug. 12).
 +
|-
 +
| whiterhino || Jason Taylor || I am open to wherever and whenever || RDU || ~$360 || Westford || ~$177 || The airfare costs listed are for the same as codeblock's two days.
 +
|-
 +
| jaysonr || Jayson Rowe || I am open to whenever || RDU || ~$50 || Westford || ~$380 || No airfare needed to RDU - listing $50 for fuel.
 +
|-
 +
| toshio || Toshio Kuratomi || My schedule is currently pretty flexible<br>Flying red eyes and mid-week gets lower prices || DEN<br>RDU || $280-$325<br>$450-$600 || Westford || $500-650 || .
 +
|-
 +
| skvidal || Seth Vidal || Beginning of sept is going to be not good for me date-wise || RDU || Free - I live here || Westford || After rental and hotel and a rental car - probably $600+ || .
 +
|-
 +
| ausil || Dennis Gilmore || September or November will be best for me || Westford || airfare ~$270 + hotel  || RDU || airfare ~$350 + hotel  || .
 +
|-
 +
| puiterwijk || Patrick Uiterwijk || Any date will work because of timezones but preferably on a friday || Remote || N/A || N/A || N/A || I will help remotely, as coming to the USA is not going to work out for me.
 +
|-
 +
| icon || Konstantin Ryabitsev || October and after || RDU || My airfare can probably be covered by LF. I can probably stay with someone in Durham, too. || Westford || airfare ~$250 + hotel || I'm not sure I can get LF to pay for a trip to Westford.
 +
|-
 +
| pingou || Pierre-Yves Chibon || Any date will work because of timezones but preferably on a friday || Remote || N/A || N/A || N/A || "I will help remotely, as coming to the USA is not going to work out for me."©puiterwijk
 +
|-
 +
|}
  
 
== Planning Prerequisites ==
 
== Planning Prerequisites ==

Revision as of 18:35, 9 August 2012

This is the main page for The Fedora Infrastructure 2012 Security FAD, which is a FAD focused on Security.

Contents

Purpose

In this FAD we will focus on some security related projects to get them done and deployed.

  • primary goal: Finish implementation and deployment of 2 factor authentication for sudo on all machines.
  • FAS Changes
    • Enabling 2 factor / pin setup.
    • Way to reset when 2 factor is lost/stolen/broken
    • backup codes?
    • figure out which backends are supported. (googleauth? yubikey?)
    • See if web apps can be made easily 2 factor aware.
    • way to enforce 2 factor for some groups?
  • Infrastructure setup
    • setup server/cgi on fas machines
    • setup backends
    • setup pam module / confirm sudo working
  • Extra Credit
    • Enable 2 factor for ssh (optional ability for packagers to use for commits)
    • Enable 2 factor for web apps
    • Enable 2 factor for hosted / nagios / misc

In addition, we may attempt to complete the following secondary goals as time allows:

  • secondary goal(s):
  • Redo koji ssl certs in a better way.
  • Revamp firewall rules to further restrict traffic between machines.
  • Come up with a better plan for signing servers

- In puppet or out of puppet? - On demand vs always on - ssh access, console, 2factor?

  • Hash out a roadmap or plans around git commit signing.

- See if this is something we want to do

  • Work on FAS security enhancements

- backup email address? - security questions? - better gpg integration? - handling for 2 factor auth

  • Setup a simple IDS of some kind?

- Notice non standard traffic in our internal nets

  • Finish up keys.fedoraproject.org and announce it.
  • Clean up selinux AVCs and move more things to enforcing.

Detailed Work Items & Final Attendees

Attendees

People needed to get primary objective done:

  • FAS developers - code needed fas changes. toshio, relrod, ricky, mmcgrath, etc
  • Sysadmins - deploy server and pam changes. skvidal, kevin, smooge, relrod etc
  • Developers - fix issues with pam or cgi parts, help integrate with backends/fas. pam devs, mricon for cgi server side, folks who know about security code.

People good to have to get other secondary objectives done:

  • Rel-eng - signing server security, cert rework. dgilmore.
  • Other folks who know IDSes, git commit signing, etc.

Attendees

The table should be pretty self-explanatory.

FAS Username Real Name Preferred Dates Preferred Location Approx. Airfare Cost (in USD) to Preferred Location Secondary Location Approx. Airfare Cost (in USD) to Secondary Location notes
kevin Kevin Fenzi RDU probibly After f18 makes the most sense to me now ~300-350 Westford ~300-350
codeblock Ricky Elrod Before the last two weeks of August (due to semester starting) RDU, but doesn't matter to me ~$320 Westford ~$312 The airfare costs I listed were for two days (e.g. leaving on Aug. 10 and returning on Aug. 12).
whiterhino Jason Taylor I am open to wherever and whenever RDU ~$360 Westford ~$177 The airfare costs listed are for the same as codeblock's two days.
jaysonr Jayson Rowe I am open to whenever RDU ~$50 Westford ~$380 No airfare needed to RDU - listing $50 for fuel.
toshio Toshio Kuratomi My schedule is currently pretty flexible
Flying red eyes and mid-week gets lower prices
DEN
RDU
$280-$325
$450-$600
Westford $500-650 .
skvidal Seth Vidal Beginning of sept is going to be not good for me date-wise RDU Free - I live here Westford After rental and hotel and a rental car - probably $600+ .
ausil Dennis Gilmore September or November will be best for me Westford airfare ~$270 + hotel RDU airfare ~$350 + hotel .
puiterwijk Patrick Uiterwijk Any date will work because of timezones but preferably on a friday Remote N/A N/A N/A I will help remotely, as coming to the USA is not going to work out for me.
icon Konstantin Ryabitsev October and after RDU My airfare can probably be covered by LF. I can probably stay with someone in Durham, too. Westford airfare ~$250 + hotel I'm not sure I can get LF to pay for a trip to Westford.
pingou Pierre-Yves Chibon Any date will work because of timezones but preferably on a friday Remote N/A N/A N/A "I will help remotely, as coming to the USA is not going to work out for me."©puiterwijk

Planning Prerequisites

See the How to organize a FAD list; you can keep your to-do list here.

  • Work out budget
  • Decide on Dates and Location
  • Arrange Facilities
  • List Resources
  • Arrange Lodging
  • Arrange Refreshments
  • Arrange a Social Event

Plan

TBD

  1. Location:
  2. Date:
  3. Schedule
    • Participants arrive at THIS_TIME_AND_DATE
    • Schedule item
    • Schedule item
    • Schedule item
    • Participants leave at THIS_TIME_AND_DATE
  4. Important skills (one or more)
    • skill
    • skill
    • skill
  5. Personnel (people who might fit the bill)
    • Name (location, role) Confirmed? (Y/N)
    • Name (location, role) Confirmed? (Y/N)
    • Name (location, role) Confirmed? (Y/N)
    • others?
  6. Other considerations
    • Contributor V can offer a living room for evening social gatherings.
    • Contributor W has a car and is willing to do airport pick-ups.
    • Contributor X needs as much advance notice as possible.
    • Contributor Y has a schedule that is better on Fridays than on Tuesdays, and prefers weekend times after 4:28 AM.
    • Contributor Z is allergic to peanuts.

Logistics

Snacks/Beverages: Details go here.

Lunch: Details go here.

Dinner: Details go here.

Budget

If you want funding from Red Hat, ask the Community Architecture team. If you can find other ways to fund your FAD, that's great too!

Contributor Dept Arrv Dept Arrv Cost
Name Travel to FAD, departure Travel to FAD, arrival Travel from FAD, departure Travel from FAD, arrival Ticket cost
Name Travel to FAD, departure Travel to FAD, arrival Travel from FAD, departure Travel from FAD, arrival Ticket cost
Name Travel to FAD, departure Travel to FAD, arrival Travel from FAD, departure Travel from FAD, arrival Ticket cost
  1. Travel: $A for airfare, bus, train, etc. funding needed to get attendees to the FAD
  2. Housing: $B for hotel, etc. needed to have attendees sleep during the FAD
    • link to hotel room booking website, if applicable
  3. Space: $C for renting space to hack in, if applicable
    • address and travel details for the space
  4. Supplies: $D for anything else you may need
    • item
    • item
    • item

Total budget: $A+B+C+D