rustguac

mirror of https://github.com/sol1/rustguac.git synced 2026-10-25 13:09:56 +00:00

Files

T

Jad Seifeddine 772f215660 sessions: one policy for every ad-hoc session from a non-admin

clear_entry_only_fields() missed several fields an ad-hoc caller below
admin could still set, and GET /api/connect's ad-hoc mode applied none
of the checks. apply_adhoc_policy() now runs on both ad-hoc routes. For
callers below admin it fences every target, drops the fields only a
saved entry may set (now also the VDI account, the Kerberos cache path,
sharing and Wake-on-LAN), lets recording be turned on but never off when
it is enabled site-wide, stops the drive being turned on when [drive]
leaves it off, and caps VDI CPU, memory and idle timeout at the [vdi]
defaults. Admins and saved entries are unchanged. Unit tests cover each
rule.

2026-10-19 13:22:57 +11:00

api.md

sessions: one policy for every ad-hoc session from a non-admin

2026-10-19 13:22:57 +11:00

configuration.md

vault: JWT token_command, JWT login in the CLI tools, checked settings

2026-10-18 13:23:14 +11:00

credential-variables.md

folder defaults: stop at folders shared with anyone extra

2026-10-17 09:53:48 +11:00

deployment-guide.md

docs: CLI group mapping, CLI audit log, and two stale OIDC docs