novox/mesh-host
6
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
428 Commits 2 Branches 0 Tags
c74cf16b755ee6f5315f60c762daee3fa3b58cf3
Commit Graph
3 Commits
Author SHA1 Message Date
jochen 76f3ca12b8 Refuse to take over a system account as one that never becomes root
mesh/delivery superseded: a newer head of the same pull request
Details
mesh/merge-gate pass: builds mesh-host → ace, g14, novox, shanks; no bus step; every machine composes with the change as it did without (4 of 4 compose)
Details
mesh/repo-check pass: its merge-check.sh passed
Details 
The controller cannot read a machine's user database, so a name it is given
for the agents' account (hq ADR 0266) may be a service's own; taking it over
would hand agents that service's files. Refuse it, touching nothing.
 2026-10-08 20:52:44 +02:00
jochen f2eda240ec Cite hq issue 228: 225 was taken on main while this branch was open 2026-10-04 10:30:57 +02:00
jochen 5d5dccdd55 A login the mesh set is given back, and undeclaring one no longer stops the apply (hq issue 225) 
A user had no removal, so an undeclared one failed as an orphan and
aborted every apply after. Removal now keeps the account, gives back
the shell recorded when the mesh first changed it if it is still the
mesh's and still usable, and says why otherwise (hq ADR 0176 §2).
A shell is refused before it is set unless it is executable and listed
in /etc/shells, since usermod succeeds on a missing one.
 2026-10-04 03:57:34 +02:00