diff --git a/04-ISSUES/361-the-control-nodes-agent-account-is-never-judged/01-diagnosis.md b/04-ISSUES/361-the-control-nodes-agent-account-is-never-judged/01-diagnosis.md index b7906f1c..3838ff01 100644 --- a/04-ISSUES/361-the-control-nodes-agent-account-is-never-judged/01-diagnosis.md +++ b/04-ISSUES/361-the-control-nodes-agent-account-is-never-judged/01-diagnosis.md @@ -43,8 +43,9 @@ link, owned by the engine's account and writable by it alone, in a directory tha **When a search runs.** Once a day (`rootsearch.Every`, from the last complete one's start); after an apply whose outcomes moved a user, a package, an action, or a file of the user and group databases or of sudo's, -doas's or polkit's rules (`apply.MovesRoot`); and when a filesystem appears that the last search did not walk. -The last two at most once an hour. The last complete search keeps judging meanwhile. +doas's or polkit's rules (`apply.MovesRoot`), at most once an hour from the last search's end, the last complete +search judging meanwhile; and at once when a filesystem appears that the last search did not walk, which that +search does not judge. **The values, one place** (`rootsearch`, read by both repositories):