mosaicstack/stack
25
0 Fork 1
Code Issues 413 Pull Requests 13 Packages Projects Releases 15 Wiki Activity

Row 253 F5 follow-up: supervise the legacy AS_USER talk and diagnostics in the case scripts #1781

New Issue
Open
opened 2026-10-22 01:57:12 +00:00 by jarvis · 0 comments
jarvis commented 2026-10-22 01:57:12 +00:00
Contributor
Copy link
Copy source

Follow-up to row 253 (Case 2 sudo boundary), from the DESIGN-C4 addendum (Gander 968db0bcd, :111-124) and Duckworth's ruling duckworth-0111 (F5, C4).

When a terminal is present, sudo runs the command in a new session and can't relay SIGKILL. Row 253 supervises its new config query and peer probe. The legacy timeout 330 ... talk path and the other AS_USER diagnostics in case1-accept.sh still wrap sudo in a GNU timeout outside the uid drop, so a timeout leaves the command running in its own session.

Brief: docs/plans/2026-10-22_case-sudo-legacy-followup.md. Owner Gander, reviewer Duckworth, after row 253.

Follow-up to row 253 (Case 2 sudo boundary), from the DESIGN-C4 addendum (Gander 968db0bcd, :111-124) and Duckworth's ruling duckworth-0111 (F5, C4). When a terminal is present, sudo runs the command in a new session and can't relay SIGKILL. Row 253 supervises its new config query and peer probe. The legacy `timeout 330 ... talk` path and the other AS_USER diagnostics in case1-accept.sh still wrap sudo in a GNU timeout outside the uid drop, so a timeout leaves the command running in its own session. Brief: docs/plans/2026-10-22_case-sudo-legacy-followup.md. Owner Gander, reviewer Duckworth, after row 253.
Sign in to join this conversation.
No Branch/Tag Specified
Labels
Clear labels
bug
Defect in framework tooling or delivered code
 fleet-enhancement
Fleet-wide reliability/speed/cost improvements surfaced by the nightly enhance pass
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
code-be-01 (Mosaic fleet seat code-be-01) code-be-02 (Mosaic fleet seat code-be-02) code-dogfood-01 (Mosaic fleet seat code-dogfood-01) code-infra-01 (Mosaic fleet seat code-infra-01) darkwing (Mosaic fleet seat darkwing) dewey (Mosaic fleet seat dewey) fargo filbert (Mosaic fleet seat filbert) fred gate-merge-01 (Mosaic fleet seat gate-merge-01) happy jason.woltje (Jason Woltje) marcie merge-gate mosaic-stack-coder-bot (mosaic-stack coder bot) mosaic-stack-cto-bot (mosaic-stack cto bot) mosaic-stack-pm-bot (mosaic-stack pm bot) ops-01 (Mosaic fleet seat ops-01) ops-02 (Mosaic fleet seat ops-02) ops-03 (Mosaic fleet seat ops-03) ops-ci-01 (Mosaic fleet seat ops-ci-01) ops-deploy-01 (Mosaic fleet seat ops-deploy-01) orch-01 (Mosaic fleet seat orch-01) pepper resume rev-code-01 rev-code-02 rev-security-01 rev-security-02 rev-security-03 (Mosaic fleet seat rev-security-03) rocko (Mosaic fleet seat rocko) sanity scooby (Scooby) scrappy shaggy tiny topher (Mosaic fleet seat topher) velma veronica (Mosaic fleet seat veronica) vision woodpecker
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mosaicstack/stack#1781