Fedora infrastructure is is currently managed from a server called batcave01. While heavily guarded, I have a strong suspicion that we can and need to do more to protect against attackers that could get access by posing as apprentices. I may have several ideas already, but I am not gonna spoil the participants ahead. So the planning would be: - show the architecture - show where and how people could/would find issue - show how to do some non disruptive offline audit - discuss some hardening measure that could be used - explain how to make patches and harden the server
Depending on the size of the crowd, we might turn into smaller group dedicated into doing 1 set of hardening, or do something else. We may also refer at past issues to see how we could have mitigated them rather than patching them, because bugs will always happen even with the best.
End goal is to get people either looking and finding issues, and/or adding some hardening.
