nntrivi2001
84e2a9f0ac
Server mode can now run each account as its own Linux user (ah-<name>) when `agenthub server install-system` has set S3 up. The dashboard reaches a member only through sudo -u / write-as / pane-launch, reads a member's files only through owner- and type-checked opens, and hooks are authenticated by peer uid. Local mode and server mode without S3 are unchanged. EXPERIMENTAL: tested with fake sudo and fake accounts only. It has not yet been verified on a real install with real member accounts, sudo or a real Codex login. Do not offer it to real users yet. - S3 core: provisioning, per-member tmux servers, the proxy key gateway, shared tools in /opt, dropped capabilities for children (P0–P5) - P4: plan and quota per member home - P6: ~/.claude.json seed; opt-in plugin baseline installed as the member; managed-settings spike script (not run) - P7: Codex account pool (`agenthub accounts add --tool codex`) - Roles merged with main's admin / analyst / developer: analysts write only their own rows, under S3 as well - Per-account prefs: one implementation (Chat UI + onboarding) - Security reviews F1–F49 (five rounds), each fix with a regression test: symlink/TOCTOU-safe member reads, no host writes in a member home, credentials and the data dir never served, owner and folder account must agree, pane tokens bound to the pane's uid, bounded sudo/tmux/git calls and member reads (no hang or crash from a member), async route rejections answer 500 instead of exiting - Docs: docs/SERVER-MODE.md (S3 model, accepted ceilings, operator runbook), docs/plans/server-mode/S3-PLAN.md, CLAUDE.md S3 rules Tests: server 2838/2841 (3 need 127.0.0.1:3000, held on this box); client 1162/1162; tsc clean; headers check passes. Co-Authored-By: Claude <noreply@anthropic.com>
33 lines
1.2 KiB
JavaScript
33 lines
1.2 KiB
JavaScript
/**
|
|
* @file fake-sudo.js
|
|
* @description Test helper for the S3 suites: an `execImpl` for
|
|
* `run-as.__setExecImpl` that plays `sudo -n -u <login> [VAR=v…] <bin> …`
|
|
* without root — it records the argv (so a test can assert nothing secret
|
|
* crossed sudo) and runs the real `scripts/server/write-as.sh` for
|
|
* `/opt/agenthub/libexec/write-as`, as this account.
|
|
* @author Nguyễn Ngọc Trí Vĩ <vinnt@smartgift.vn>
|
|
*/
|
|
|
|
const path = require("node:path");
|
|
const { execFileSync } = require("node:child_process");
|
|
|
|
const WRITE_AS = path.join(__dirname, "..", "..", "..", "scripts", "server", "write-as.sh");
|
|
|
|
/** `{ exec, calls }`: pass `exec` to `runAs.__setExecImpl`; `calls` = every sudo argv. */
|
|
function fakeSudo() {
|
|
const calls = [];
|
|
const exec = (cmd, argv, opts = {}) => {
|
|
calls.push([cmd, ...argv]);
|
|
if (cmd !== "sudo") return execFileSync(cmd, argv, opts);
|
|
let i = argv.indexOf("-u") + 2; // past the login
|
|
while (/^[A-Z_][A-Z0-9_]*=/.test(argv[i])) i++;
|
|
const [bin, ...rest] = argv.slice(i);
|
|
if (bin === "/opt/agenthub/libexec/write-as")
|
|
return execFileSync("sh", [WRITE_AS, ...rest], opts);
|
|
return execFileSync(bin, rest, opts);
|
|
};
|
|
return { exec, calls };
|
|
}
|
|
|
|
module.exports = { fakeSudo };
|