Re: [Savannah-hackers-public] Re: ssh logins to lists.gnu.org

[Karl Berry]

I realized last night there's another significant issue with access to
lists -- the mailing list feature on savannah relies on being able to
get over to lists and run a command to create or delete a list.  We
don't want to lose that functionality.  I do not know if 

Ward's original proposal was to limit incoming ssh on lists to the
personal machines of savannah hackers.  Let me take that one step
further: how about if it is limited only to savannah itself?

I realize that does not address every conceivable security issue, but is
it acceptable?  It is surely an improvement (from your point of view)
over allowing access from everywhere on the one hand, and does not
require extra work and software from us on the other.  Everything's a
tradeoff ...