mesh-catalog

1,084 Commits 13 Branches 0 Tags

2 Commits

Include renames

Author	SHA1	Message	Date
jochen	debb897c21	Run the router as its own account, ask unlinking of the linked account, and take no approval where an agent can become root (hq ADR 0259 §7, §8)	2026-10-09 17:08:17 +02:00
jochen	f015aba34a	sudo: declare the operator account's passwordless escalation as a module Three modules' tools act through `sudo -n` and nothing declared that the account may; each machine said so in a hand-set line in /etc/sudoers. The module owns the package and /etc/sudoers.d/10-mesh-operator (0440), checked by visudo in its manifest test, and serves sudo_rules, sudo_check and sudo_drop_ins from a Go bundle. lab stops declaring the sudo package, which would collide with this module on the node that runs both (hq ADR 0207, to-be 42 Phase 1).	2026-10-04 12:50:20 +02:00

Author

SHA1

Message

Date

jochen

debb897c21

Run the router as its own account, ask unlinking of the linked account, and take no approval where an agent can become root (hq ADR 0259 §7, §8)

2026-10-09 17:08:17 +02:00

jochen

f015aba34a

sudo: declare the operator account's passwordless escalation as a module

Three modules' tools act through `sudo -n` and nothing declared that the
account may; each machine said so in a hand-set line in /etc/sudoers. The
module owns the package and /etc/sudoers.d/10-mesh-operator (0440), checked
by visudo in its manifest test, and serves sudo_rules, sudo_check and
sudo_drop_ins from a Go bundle. lab stops declaring the sudo package, which
would collide with this module on the node that runs both (hq ADR 0207,
to-be 42 Phase 1).

2026-10-04 12:50:20 +02:00