cronekorkn/bundlewrap
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

fix(users): add no unrestricted key next to forced commands

Browse source 
The for loop's else branch always ran, so every authorized user with
commands also got its key without restriction; root on every node had
a full shell as wol on the waker.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RywMtsL8qXG7GDY3MHq9Uh
This commit is contained in:
CroneKorkN 2026-10-23 15:18:08 +02:00
parent a18ad30afc
commit 267f897aa0
No known key found for this signature in database
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
bundles/users/metadata.py
View file

@ -26,7 +26,7 @@ def authorized_users(metadata):
for command in options.get('commands', []): for command in options.get('commands', []):
users[name]['authorized_keys'].add(f'command="{command}" ' + authorized_user_public_key) users[name]['authorized_keys'].add(f'command="{command}" ' + authorized_user_public_key)
else: if not options.get('commands'):
users[name]['authorized_keys'].add(authorized_user_public_key) users[name]['authorized_keys'].add(authorized_user_public_key)
return { return {