jochen bf3f45e769 A login session is the account's own, of class user, read at accept (hq ADR 0272) ...

The cgroup names a scope; only logind's record of it says whose session it
is. The engine now takes a session only when /run/systemd/sessions/<id>
says it is this account's (UID), of class user (not a greeter's or the
user manager's), and of this very scope. And it reads the session the
moment the connection is accepted, with the namespaces, before the line,
so the peer is judged as it was when it connected.

Tests: session-9.scope with a user record is taken; x.scope, a different
uid, another account's session, a greeter's, a record naming another
scope, no record, and a path with dots are not; the session is read
before the line is forwarded.

2026-10-09 13:55:45 +02:00

..

accounts

Let the setuid search run to its 15-minute bound, ask pacman once, and call a walk with errors incomplete

2026-10-09 12:11:57 +02:00

apply

Read the homes in one order, so their test does not depend on a map's

2026-10-09 12:36:56 +02:00

bootstrap

Say controller in the installer's and the token's words, as the glossary does

2026-10-08 01:46:21 +02:00

bundle

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

declaration

Judge whether an account declared never to become root can, so a machine's agents are known confined

2026-10-09 10:07:35 +02:00

firewall

The mesh's own ban chain is a ban wherever it hangs; the front end's record is cited as 0180 (hq ADR 0186)

2026-10-02 18:42:16 +02:00

identity

Say controller in the installer's and the token's words, as the glossary does

2026-10-08 01:46:21 +02:00

image

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

inventory

Repoint ADR references after HQ consolidated 65 records to 23

2026-08-28 23:33:44 +02:00

link

Merge main, and close what the confirmation review found (hq ADR 0272)

2026-10-09 13:09:48 +02:00

liveness

Say a tool check's errors once and as they stand, and test the link on a real bus

2026-10-08 17:01:15 +02:00

meshcli

A login session is the account's own, of class user, read at accept (hq ADR 0272)

2026-10-09 13:55:45 +02:00

network

Take a tick a little early as the network look's tick

2026-10-07 18:52:16 +02:00

outward

Every physical link faces outside, up or down

2026-10-02 11:53:53 +02:00

profile

Count the same meters the power module's sampler reads (hq ADR 0255)

2026-10-08 14:44:55 +02:00

reachable

Report what an adopted node holds, its firewall and what is reachable, and speak unasked when that changes (hq ADR 0100)

2026-09-22 17:22:31 +02:00

store

Give a service's held state its own field and key, so main compiles again

2026-10-09 03:03:58 +02:00

system

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

tunnel

A taken tunnel's found configuration is retired once the take is proven (hq ADR 0119)

2026-09-27 00:47:57 +02:00

units

Say every failed unit, the module's and the machine's (hq issue 315)

2026-10-08 11:28:51 +02:00

upgrade

Roll a core build back by a witness that is not the new build (hq to-be 45 Phase 4)

2026-10-06 18:23:56 +02:00

witness

Keep a replaced build reachable, and delete it only once no process runs from it (hq issue 289)

2026-10-07 02:45:08 +02:00