Fimeg/souveraine
Watch
1
0
Fork
You've already forked souveraine
 0
Code Releases Activity

packaging: declare the lock authority's account

Browse source 
souveraine-session is machine-tier — one per install, like souveraine.
Agent principals stay out: sysusers is per-install, admission is per
agent and per node, and a line here would mint annie on every device the
package touches. sessiond stays a user unit until the lock handshake,
PAM path and key-eviction order are proven under the new uid.
This commit is contained in:
Fimeg 2026-08-17 14:41:27 -04:00
commit 14298e73f8
1 changed files with 13 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

13
packaging/arch/souveraine.sysusers
View file

@ -3,3 +3,16 @@
# Session users join the group to talk to the daemon:
# usermod -aG souveraine <user>
u souveraine - "SouveraineOS system tier" /var/lib/souveraine -
# The lock authority's principal. Declared here because it is machine-tier —
# one per install, like `souveraine`, and not an agent. sessiond is still a
# user unit with no User=; moving it here without first proving the Wayland
# lock handshake, PAM path, crash retake, and key-eviction order would only
# relocate the black screen. See souveraine/saf/authority/01-session.md.
u souveraine-session - "SouveraineOS lock authority" /var/lib/souveraine-session -
# Agent principals (souvie, annie, vanguard, …) are deliberately NOT here.
# sysusers is per-install; admission is per-agent and per-node, keyed to an
# agent ID rather than a display name, and must refuse collisions. A line
# here would mint accounts on every device the package ever touches.
# See souveraine/saf/identity/02-agent-principal.md.