GameCult/Idunn
Watch
9
0
Fork
You've already forked Idunn
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Accept dynamic primary group in workload audit

Browse source
This commit is contained in:
Meta Vens 2026-09-28 15:19:52 +02:00
commit 865190611f
2 changed files with 67 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

7
docs/deployment-authority.md
View file

@ -135,6 +135,13 @@ deterministically lowers the constrained launch contract through the configured
workload driver; repository-owned raw unit or container-runtime text is not an
input.
For systemd `DynamicUser` workloads, systemd's reported primary user and group
names are allocated runtime identities. When a binding declares no fixed state
group, Idunn validates that the process primary UID and GID match instead of
requiring an empty `Group` property. A declared state group remains an exact
name and numeric GID contract because it grants the process its bounded write
lease.
## Operator binding
An operator binding is static root-admitted configuration, not observed state.