Re: Installing anonymous voting system on a server

[Ross Golder <ross golder org>]

On จ., 2005-10-17 at 22:07 +0200, Vincent Untz wrote:
> Hi,
> 
> Le lundi 10 octobre 2005 à 21:45 +0200, Vincent Untz a écrit :
> > Hi guys,
> > 
> > It seems we might see a referendum happening before the elections this
> > year. It means less time for the membership committee to organize a lot
> > of stuff, but also less time for the sysadmins to help us :-)
> > 
> > We'd appreciate if a sysadmin can look at the code for the anonymous
> > voting system and search for security problems (there shouldn't be any
> > but who knows ;-)). And then, if we can install it, it'd be perfect. The
> > code can be downloaded here:
> > 	http://tmp.vuntz.net/anonvoting.tgz
> > 
> > (I should probably put the code somewhere in cvs, but I don't know
> > where)
> > 
> > There's a database.sql file in the tarball describing the sql tables
> > that are needed. Note that the last one (foundation_members) already
> > exists, although it doesn't have the same structure.
> 
> Just wondering... Can I help in some way for this?
> 
> We'd like to see the voting period start next week, but we can push it
> back if necessary.
> 
> Vincent
> 

Just sorted this on #sysadmin. We sorted Vincent out perms to update the
db structure himself, added the Apache directives so that PHP would work
in <http://foundation.gnome.org/vote/>, created a 'anonvoting' mysql
user with limited access to the foundation database, and set up the
usual /home/admin/secret/anonvoting file for it. At some point, Vincent
will check the voting code into the 'foundation-web' module, and the
auto-update scripts *should* take care of the rest (or may need a
kick!).

--
Ross