roberts/atlus
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
atlus/backend
History
roberts 6a0c8757f8 Run terminals and GUI apps as the authenticated user, not root 
Atlus runs as root (systemd) but user-facing processes must run under the
authenticated user's identity. Added privilege-dropping via preexec_fn
(os.setgid + os.initgroups + os.setuid) to both terminal PTY spawning
and GUI app launching. System admin operations (services, packages,
network, updates) intentionally remain root.

Autostart apps now support a configurable default_user; without one set,
autostart defers until the first user logs in and runs as that user.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-15 00:35:52 -05:00
..
routers Run terminals and GUI apps as the authenticated user, not root 2026-03-15 00:35:52 -05:00
ws Initial commit — Atlus web desktop environment for SBCs 2026-03-14 16:53:46 -05:00
__init__.py Initial commit — Atlus web desktop environment for SBCs 2026-03-14 16:53:46 -05:00
auth.py Initial commit — Atlus web desktop environment for SBCs 2026-03-14 16:53:46 -05:00
config.py Run terminals and GUI apps as the authenticated user, not root 2026-03-15 00:35:52 -05:00
display.py Run terminals and GUI apps as the authenticated user, not root 2026-03-15 00:35:52 -05:00
main.py Run terminals and GUI apps as the authenticated user, not root 2026-03-15 00:35:52 -05:00
netwatch.py Add ethernet link watchdog and prevent disabling last active interface 2026-03-15 00:12:00 -05:00
privdrop.py Run terminals and GUI apps as the authenticated user, not root 2026-03-15 00:35:52 -05:00
requirements.txt Fix robustness issues across backend and frontend 2026-03-14 17:41:43 -05:00
sessions.py Run terminals and GUI apps as the authenticated user, not root 2026-03-15 00:35:52 -05:00