novox/mesh-controller
Archived
9
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Make the login shell's execute optional, so a machine may withhold it (hq ADR 0268) #169

Merged
mesh-admin merged 1 commits from withhold-login-shell-execute into main 2026-10-08 22:52:29 +00:00
Conversation 3 Commits 1 Files Changed 3
+77 -6
1 Commits
Author SHA1 Message Date
jochen 2073bfe2e6 Make the login shell's execute optional, so a machine may withhold it
mesh/merge-gate pass: builds build-agent, mesh-controller, route-proxy → ace, g14, novox, shanks; no bus step; every machine composes with the change as it…
Details
mesh/repo-check pass: its merge-check.sh passed
Details
mesh/delivery delivered
Details
mesh/delivery-group group withhold-login-shell-execute merged: every member is merged
Details 
execute runs any command as the operator account, which can become root
without a person. The operator withholds it on the control-node until a
call needs a person's approval (hq ADR 0268); the holder withholds it per
machine through its own setting. With execute required, that holder could
not hold the seat there and would be judged silent. ADR 0246's optional
mark lets it hold the seat without serving the verb.
 2026-10-09 00:07:33 +02:00