agent-has-its-users-permissions
planarian @ a924e09 · Spec v4.6 · snapshot main · all versions
alice (uid 1000, not an administrator) starts an agent with
planarian agent run helper. It has alice’s permissions and no more: its stop of gym-web, a system service alice may not stop, is refused Unauthorized; its stop of alice’s own pipewire runs. Both are attributed to agent:helper.
| Harness | Scoring | Expects | Latest verdict |
|---|---|---|---|
| fake, vm | must-pass | txn: service:gym-web StopAndSuppress, service@1000:pipewire Committed StopAndSuppress; units: service:gym-web Running | fake: PASS; VM: not run in this build |
What it exercises
No invariant by name.