@sealant/api-contracts-next 0.39.0-next.705 → 0.39.0-next.706
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -37,7 +37,9 @@ export type SessionMode = typeof sessionModeSchema.Type;
|
|
|
37
37
|
* and `XDG_RUNTIME_DIR`, the image's `/etc/sealant/person-env`, and none of the daemon's logins.
|
|
38
38
|
* Only a person Mend made: a uid in 40001–49999 whose primary group is `mend` (40000), never root,
|
|
39
39
|
* on a workspace whose sealantd reports `exec.user`. Anything else is refused before anything
|
|
40
|
-
* starts (`409`, `user-unsupported`).
|
|
40
|
+
* starts (`409`, `user-unsupported`). sealantd checks the passwd entry it resolves again and starts
|
|
41
|
+
* a process only as one of the executor's people (its owner map's uids, or the range), so editing
|
|
42
|
+
* `/etc/passwd` with `sudo` cannot widen it. Absent: the workspace's own user, as before.
|
|
41
43
|
*/
|
|
42
44
|
export declare const workspaceProcessUserSchema: Schema.String;
|
|
43
45
|
export type WorkspaceProcessUser = typeof workspaceProcessUserSchema.Type;
|
|
@@ -35,7 +35,9 @@ export const sessionModeSchema = Schema.Literals(["pty", "pipe"]);
|
|
|
35
35
|
* and `XDG_RUNTIME_DIR`, the image's `/etc/sealant/person-env`, and none of the daemon's logins.
|
|
36
36
|
* Only a person Mend made: a uid in 40001–49999 whose primary group is `mend` (40000), never root,
|
|
37
37
|
* on a workspace whose sealantd reports `exec.user`. Anything else is refused before anything
|
|
38
|
-
* starts (`409`, `user-unsupported`).
|
|
38
|
+
* starts (`409`, `user-unsupported`). sealantd checks the passwd entry it resolves again and starts
|
|
39
|
+
* a process only as one of the executor's people (its owner map's uids, or the range), so editing
|
|
40
|
+
* `/etc/passwd` with `sudo` cannot widen it. Absent: the workspace's own user, as before.
|
|
39
41
|
*/
|
|
40
42
|
export const workspaceProcessUserSchema = Schema.String.check(Schema.isPattern(/^(?:[a-z_][a-z0-9_-]{0,31}|[0-9]{1,10})$/));
|
|
41
43
|
/**
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@sealant/api-contracts-next",
|
|
3
|
-
"version": "0.39.0-next.
|
|
3
|
+
"version": "0.39.0-next.706",
|
|
4
4
|
"description": "Contract-first HTTP API definitions for Sealant services",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"repository": {
|
|
@@ -32,7 +32,7 @@
|
|
|
32
32
|
"peerDependencies": {
|
|
33
33
|
"effect": ">=4.0.0-beta.85 <5"
|
|
34
34
|
},
|
|
35
|
-
"gitHead": "
|
|
35
|
+
"gitHead": "cb310e9f9e850db78edf0f7f8fb1c3de42df1238",
|
|
36
36
|
"publishConfig": {
|
|
37
37
|
"access": "public"
|
|
38
38
|
}
|