fix: grant Control scoped access to mesh state #57

Merged
ochenstarik-ui merged 8 commits from codex/mesh-state-permissions into main 2026-08-17 19:12:20 +00:00
Showing only changes of commit e04bfcdc10 - Show all commits

View file

@ -537,7 +537,7 @@ grep -Fq 'chmod 0660 "$MESH_DIR/nodes.tsv"' "$bootstrap"
grep -Fq 'install -d -m 0700 -o root -g root "$WG_DIR" /etc/wireguard' "$bootstrap" grep -Fq 'install -d -m 0700 -o root -g root "$WG_DIR" /etc/wireguard' "$bootstrap"
mesh_init_definition="$(extract_bootstrap_function mesh_init)" mesh_init_definition="$(extract_bootstrap_function mesh_init)"
grep -Fq ' ensure_system_user "$CONTROL_USER"' <<<"$mesh_init_definition" grep -Fq ' ensure_system_user "$CONTROL_USER"' <<<"$mesh_init_definition"
[[ "$(grep -Fc ' ensure_mesh_state' "$bootstrap")" -eq 2 ]] [[ "$(grep -Fc ' ensure_mesh_state' "$bootstrap")" -eq 3 ]]
grep -Fq ' repair_mesh_state_permissions' <<<"$prepare_control_state_definition" grep -Fq ' repair_mesh_state_permissions' <<<"$prepare_control_state_definition"
if [[ "$(uname -s)" != MINGW* ]] && command -v sudo >/dev/null 2>&1; then if [[ "$(uname -s)" != MINGW* ]] && command -v sudo >/dev/null 2>&1; then
bash "$root/tests/bootstrap/test-mesh-state-permissions.sh" bash "$root/tests/bootstrap/test-mesh-state-permissions.sh"