novox/mesh-controller
Archived
9
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Give a bundle module's bound credential to the account its runtime runs as (issue 624) #302

Closed
mesh-admin wants to merge 1 commits from fix/624-a-bundles-secrets-belong-to-its-runtime into main
pull from: fix/624-a-bundles-secrets-belong-to-its-runtime
merge into: :main
Conversation 4 Commits 1 Files Changed 2
+67 -1
1 Commits
Author SHA1 Message Date
jochen 41216e4d4c Give a bundle module's bound credential to the account its runtime runs as (hq issue 624)
mesh/merge-gate out of date: judged against trunk f3875a6b6019, the trunk is now 0a1dc5f93fcb; judged again on a recheck or when it is merged
Details
mesh/repo-check out of date: judged against trunk f3875a6b6019, the trunk is now 0a1dc5f93fcb; judged again on a recheck or when it is merged
Details
mesh/delivery stopped: the pull request closed unmerged
Details 
A consumer's credential file was composed with the owner the module declared, root when it declared
none. A module whose code is a bundle the node's runtime runs reads it as the operator's account, and
a root-owned 0600 file is one it cannot read: the lab cloned the forge with no credential. The grant
side was fixed the same way for issue 225; this is the consumer's side. A declared owner still wins.
 2026-10-13 14:39:20 +02:00