3 Commits

Include renames

Author	SHA1	Message	Date
jschoubben	281837847e	Put busybox's account removal back, test the sample, and read a held lock as kept only for a running walk (hq ADR 0328 review) ... An earlier change dropped alpine's RemoveAccount and RemoveGroup, so alpine made no module identity at all. The sample beneath a root in shape had no test of its own. And an apply that found the library's lock held read the library as kept even when what held it was a take act about to be refused for a missing disk; it now does so only while a take walk is running, and otherwise waits and judges as always.	2026-10-12 22:21:42 +02:00
jschoubben	c7551162d6	Give no account a home, keep old data's sub-paths for the warrant, and never hand out setgid (hq ADR 0328 review) ... usermod --gid regroups every file under an account's home, and accounts were made with / as home: they now have /nonexistent, and an older account's home is moved there (without its files) before its group changes. A sub-path asked for later that holds data not in the group waits for the operator as the root would. The take act gives the group to hardlinked files an account owns (the *arr apps' downloads) and leaves root's; a file's setuid or setgid bit the regroup takes is never put back, so no setgid file hands out the library's group; each is counted. An apply no longer waits for a running take walk.	2026-10-12 22:18:16 +02:00
jschoubben	2cffa33bcc	Keep a root without asking only when its data beneath is the library's already (hq ADR 0328 §7) ... A root in the group with setgid was kept without a warrant even when the data beneath it was not in the group, which §7 says the operator is asked about. A root is now kept without asking only when it is empty, or it and a bounded sample beneath it are all in the group with group write (and setgid on folders). On busybox, an account the mesh made is given its added groups with addgroup and delgroup; a change of its primary group is refused, saying why.	2026-10-12 22:14:10 +02:00