[Savannah-hackers] Re: subversions hacked?

[Loic Dachary]

Hugo Gayosso writes:
 > -----BEGIN PGP SIGNED MESSAGE-----
 > Hash: SHA1
 > 
 > I guess some of you already saw this message, but I didn't see any
 > comments on either system-hackers nor on savannah-hackers, so here it
 > is:
 > 
 > I am truncating parts of the message, in summary a lot if not all of
 > the shell accounts in subversions were removed from '/etc/passwd' and
 > a bunch of other accounts (suspicious usernames) were created:

        I did a sort on /etc/passwd because I remembered it improves
access to entries. I did not remove accounts though. The old password
file is at /etc/passwd-2003-03-17 and only shows these diffs (after a sort
on both)

1053a1054
> gogo653:x:63275:65534:Robert Gogolok 
> <address@hidden>:/home/gogo653:/usr/local/bin/cvssh
1781d1781
< munsternet:x:63163:65534:Munsternet Developpement project 
<address@hidden>:/home/munsternet:/usr/local/bin/cvssh
2124a2125
> riffraff:x:63274:65534:gabriele renzi 
> <address@hidden>:/home/riffraff:/usr/local/bin/cvssh
2402a2404
> svcvs:x:1014:1014:Savannah internal CVS user,,,:/home/svcvs:/bin/bash
2585a2588
> vlarrieu:x:63273:65534:LARRIEU Vivian <address@hidden>:/home/vlarr

        I created svcvs for sv_cvs script purposes.

        I should have notified address@hidden about this and I
apologize for not doing so. Sorry for the false alarm. It's conforting to
know that mistake won't be overlooked ;-)

        Cheers,

-- 
             Sauvez le droit d'auteur
Loic   Dachary   http://eucd.info/  address@hidden
              Tel : 33 1 42 76 05 49