62cf6cdd56
The 2-user split (left4me + l4d2-sandbox) has been inherited as a constraint across multiple recent plans (idmap-on-mount, build-time- idmap, helper consolidation) without ever being designed end-to-end. Three plausible configurations: collapse to 1 user (rejected for security), keep at 2 users (status quo), or split web from game into 3 users for blast-radius limiting on either side. Doc captures the threat-model heuristics, cross-uid file-access plumbing options (shared group vs. world-read), idmap implications, a step-by-step migration sketch for the 3-user variant, and explicit out-of-scope items (per-instance gameserver uids, etc.). Detailed enough that a future session can pick a configuration and execute without re-deriving the design space. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| plans | ||
| specs | ||