jschoubben f30089c288 sudo: count any sudo rule as root, fail on what cannot be judged, and commit no binary ...

The review of 2026-10-09: an unknown account and sudo that could not be asked were answered not root, and
only NOPASSWD on ALL counted, though NOPASSWD on systemctl, tee, bash or pacman reaches root as surely,
and a password the person typed is kept by sudo for minutes. Any rule now counts, as the node-engine's
own judge of an agent account does (ADR 0266); what cannot be judged fails the answer. The bundle built
in the module's directory is removed and ignored.

2026-10-09 17:08:17 +02:00

..

escalation_test.go

sudo: count any sudo rule as root, fail on what cannot be judged, and commit no binary

2026-10-09 17:08:17 +02:00

escalation.go

sudo: count any sudo rule as root, fail on what cannot be judged, and commit no binary

2026-10-09 17:08:17 +02:00

machine_test.go

sudo: declare the operator account's passwordless escalation as a module

2026-10-04 12:50:20 +02:00

machine.go

sudo: declare the operator account's passwordless escalation as a module

2026-10-04 12:50:20 +02:00

main.go

sudo: count any sudo rule as root, fail on what cannot be judged, and commit no binary

2026-10-09 17:08:17 +02:00

manifest_test.go

sudo: declare the operator account's passwordless escalation as a module

2026-10-04 12:50:20 +02:00

shape_test.go

sudo: declare the operator account's passwordless escalation as a module

2026-10-04 12:50:20 +02:00

sudo_test.go

sudo: declare the operator account's passwordless escalation as a module

2026-10-04 12:50:20 +02:00

sudo.go

sudo: declare the operator account's passwordless escalation as a module

2026-10-04 12:50:20 +02:00