From 01d3c6d995cfe568dee7739b775dc4ce75cf6e09 Mon Sep 17 00:00:00 2001
From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Date: Tue, 17 Feb 2009 20:37:47 -0500
Subject: describe the motivation for our current su_monkeysphere_user
 implementation.

---
 src/share/common | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/src/share/common b/src/share/common
index 773c11f..4120259 100644
--- a/src/share/common
+++ b/src/share/common
@@ -92,6 +92,20 @@ log() {
 
 # run command as monkeysphere user
 su_monkeysphere_user() {
+    # our main goal here is to run the given command as the the
+    # monkeysphere user, but without prompting for any sort of
+    # authentication.  If this is not possible, we should just fail.
+
+    # FIXME: our current implementation is overly restrictive, because
+    # there may be some su PAM configurations that would allow su
+    # "$MONKEYSPHERE_USER" -c "$@" to Just Work without prompting,
+    # allowing specific users to invoke commands which make use of
+    # this user.
+
+    # chpst (from runit) would be nice to use, but we don't want to
+    # introduce an extra dependency just for this.  This may be a
+    # candidate for re-factoring if we switch implementation languages.
+
     case $(id -un) in
 	# if monkeysphere user, run the command under bash
 	"$MONKEYSPHERE_USER")
-- 
cgit v1.2.3

1?h=master'>log</a><a href='/notmuch/tree/tags/af/a1?h=master'>tree</a><a href='/notmuch/commit/tags/af/a1?h=master'>commit</a><a class='active' href='/notmuch/diff/tags/af/a1?h=master'>diff</a></td><td class='form'><form class='right' method='get' action='/notmuch/log/tags/af/a1'>
<input type='hidden' name='h' value='master'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/notmuch/diff/?h=master'>root</a>/<a href='/notmuch/diff/tags?h=master'>tags</a>/<a href='/notmuch/diff/tags/af?h=master'>af</a>/<a href='/notmuch/diff/tags/af/a1?h=master'>a1</a></div><div class='content'><div class='cgit-panel'><b>diff options</b><form method='get'><input type='hidden' name='h' value='master'/><table><tr><td colspan='2'/></tr><tr><td class='label'>context:</td><td class='ctrl'><select name='context' onchange='this.form.submit();'><option value='1'>1</option><option value='2'>2</option><option value='3' selected='selected'>3</option><option value='4'>4</option><option value='5'>5</option><option value='6'>6</option><option value='7'>7</option><option value='8'>8</option><option value='9'>9</option><option value='10'>10</option><option value='15'>15</option><option value='20'>20</option><option value='25'>25</option><option value='30'>30</option><option value='35'>35</option><option value='40'>40</option></select></td></tr><tr><td class='label'>space:</td><td class='ctrl'><select name='ignorews' onchange='this.form.submit();'><option value='0' selected='selected'>include</option><option value='1'>ignore</option></select></td></tr><tr><td class='label'>mode:</td><td class='ctrl'><select name='dt' onchange='this.form.submit();'><option value='0' selected='selected'>unified</option><option value='1'>ssdiff</option><option value='2'>stat only</option></select></td></tr><tr><td/><td class='ctrl'><noscript><input type='submit' value='reload'/></noscript></td></tr></table></form></div><div class='diffstat-header'><a href='/notmuch/diff/?h=master'>Diffstat</a> (limited to 'tags/af/a1')</div><table summary='diffstat' class='diffstat'><tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/1378810864.13840.85.camel@thor.local/debian?h=master'>tags/af/a1/1378810864.13840.85.camel@thor.local/debian</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/1378810864.13840.85.camel@thor.local/signed?h=master'>tags/af/a1/1378810864.13840.85.camel@thor.local/signed</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/1378810864.13840.85.camel@thor.local/unread?h=master'>tags/af/a1/1378810864.13840.85.camel@thor.local/unread</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/154643626047.9366.41869868685972774@auryn.jones.dk/jones?h=master'>tags/af/a1/154643626047.9366.41869868685972774@auryn.jones.dk/jones</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/154643626047.9366.41869868685972774@auryn.jones.dk/sent?h=master'>tags/af/a1/154643626047.9366.41869868685972774@auryn.jones.dk/sent</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/154643626047.9366.41869868685972774@auryn.jones.dk/signed?h=master'>tags/af/a1/154643626047.9366.41869868685972774@auryn.jones.dk/signed</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/1D0CE1BD-F829-11D8-95C4-0003937551FA@mac.com/inbox?h=master'>tags/af/a1/1D0CE1BD-F829-11D8-95C4-0003937551FA@mac.com/inbox</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/1D0CE1BD-F829-11D8-95C4-0003937551FA@mac.com/old?h=master'>tags/af/a1/1D0CE1BD-F829-11D8-95C4-0003937551FA@mac.com/old</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/20070215084730.GA32568@asteria.debian.or.at/debian?h=master'>tags/af/a1/20070215084730.GA32568@asteria.debian.or.at/debian</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/20070215084730.GA32568@asteria.debian.or.at/inbox?h=master'>tags/af/a1/20070215084730.GA32568@asteria.debian.or.at/inbox</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/20070215084730.GA32568@asteria.debian.or.at/old?h=master'>tags/af/a1/20070215084730.GA32568@asteria.debian.or.at/old</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/200912212123.46049.russell@coker.com.au/debian?h=master'>tags/af/a1/200912212123.46049.russell@coker.com.au/debian</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/20170209200002.7A867516C@lxp5.free-owl.de/sys?h=master'>tags/af/a1/20170209200002.7A867516C@lxp5.free-owl.de/sys</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/20170209200002.7A867516C@lxp5.free-owl.de/unread?h=master'>tags/af/a1/20170209200002.7A867516C@lxp5.free-owl.de/unread</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/20190309100002.3328A1CCDD8@lxp5.free-owl.de/sys?h=master'>tags/af/a1/20190309100002.3328A1CCDD8@lxp5.free-owl.de/sys</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/20190309100002.3328A1CCDD8@lxp5.free-owl.de/unread?h=master'>tags/af/a1/20190309100002.3328A1CCDD8@lxp5.free-owl.de/unread</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/20220917051553.6C9AB3C6@xayide.jones.dk/jones?h=master'>tags/af/a1/20220917051553.6C9AB3C6@xayide.jones.dk/jones</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/20220917051553.6C9AB3C6@xayide.jones.dk/sys?h=master'>tags/af/a1/20220917051553.6C9AB3C6@xayide.jones.dk/sys</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/20220917051553.6C9AB3C6@xayide.jones.dk/unread?h=master'>tags/af/a1/20220917051553.6C9AB3C6@xayide.jones.dk/unread</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/5047004C.9000902@greffrath.com/debian?h=master'>tags/af/a1/5047004C.9000902@greffrath.com/debian</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/54662B10.4010907@briarproject.org/freedom?h=master'>tags/af/a1/54662B10.4010907@briarproject.org/freedom</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/87boc14szr.fsf@debian.home/debian?h=master'>tags/af/a1/87boc14szr.fsf@debian.home/debian</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/87boc14szr.fsf@debian.home/signed?h=master'>tags/af/a1/87boc14szr.fsf@debian.home/signed</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/CAAh8qswEp50EW-%3d+6ptdFLVsWB1xm2vjxnMaAP8CqhdTvs_ftg@mail.gmail.com/unread?h=master'>tags/af/a1/CAAh8qswEp50EW-=+6ptdFLVsWB1xm2vjxnMaAP8CqhdTvs_ftg@mail.gmail.com/unread</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/CAH8mndJ1W3BYZVsZFRKG_90%3dT_JkLgv_BkTstTysFFPOte9gfA@mail.gmail.com/sugar?h=master'>tags/af/a1/CAH8mndJ1W3BYZVsZFRKG_90=T_JkLgv_BkTstTysFFPOte9gfA@mail.gmail.com/sugar</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/CAH8mndJ1W3BYZVsZFRKG_90%3dT_JkLgv_BkTstTysFFPOte9gfA@mail.gmail.com/unread?h=master'>tags/af/a1/CAH8mndJ1W3BYZVsZFRKG_90=T_JkLgv_BkTstTysFFPOte9gfA@mail.gmail.com/unread</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/CY1PR1201MB0940E27C80EEC73A35FEAAACD37D0@CY1PR1201MB0940.namprd12.prod.outlook.com/debian?h=master'>tags/af/a1/CY1PR1201MB0940E27C80EEC73A35FEAAACD37D0@CY1PR1201MB0940.namprd12.prod.outlook.com/debian</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/CY1PR1201MB0940E27C80EEC73A35FEAAACD37D0@CY1PR1201MB0940.namprd12.prod.outlook.com/unread?h=master'>tags/af/a1/CY1PR1201MB0940E27C80EEC73A35FEAAACD37D0@CY1PR1201MB0940.namprd12.prod.outlook.com/unread</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/l03130314b1e011095b12@%255b207.181.210.14%255d/inbox?h=master'>tags/af/a1/l03130314b1e011095b12@%5b207.181.210.14%5d/inbox</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
<tr><td class='mode'>-rw-r--r--</td><td class='add'><a href='/notmuch/diff/tags/af/a1/l03130314b1e011095b12@%255b207.181.210.14%255d/old?h=master'>tags/af/a1/l03130314b1e011095b12@%5b207.181.210.14%5d/old</a></td><td class='right'>0</td><td class='graph'><table summary='file diffstat' width='0%'><tr><td class='add' style='width: -nan%;'/><td class='rem' style='width: -nan%;'/><td class='none' style='width: -nan%;'/></tr></table></td></tr>
</table><div class='diffstat-summary'>30 files changed, 0 insertions, 0 deletions</div><table summary='diff' class='diff'><tr><td>