Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
[] PLEASE READ: Recent Security Breaches on Open Source Sites


As you may be aware, there was a security breach on the site yesterday.  This follows the security breach that occurred on two short weeks ago.

We are not taking these recent security breaches lightly.  Effective immediately, we have revoked SSH shell access to everyone on all our servers.  Direct shell access to will no longer be allowed, and shell access to will be granted on an as-needed basis.  Since has access to all the file systems that are available to, you should not need to access directly from a shell.

If you need shell access on, please use the Portal tool to request a shell.  You must provide a valid, detailed reason for needing a shell, and shells will be granted mainly to release engineers.  Please note that for regular committer activities (using CVS, SVN and Git) a shell is not required.

In the background, we will be performing analysis on your committer accounts to make sure your account is secure.

I apologize for the inconvenience this causes; however, our site's security, and the integrity of your source code, are our #1 priorities.

If you have any questions or concerns, please contact us at webmaster@xxxxxxxxxxx.


Denis Roy
Director, IT Services
Eclipse Foundation, Inc. --
Office: 613.224.9461 x224 (Eastern time)

          Europe 2011

Back to the top