approve-at-terminal-runs
planarian @ a924e09 · Spec v4.6 · snapshot main · all versions
An administrator who is not root asks to disable sshd (Security: AskFirst). Root approves it from a real terminal, which the daemon reads from the peer’s pidfd: the approval is taken and the change commits.
| Harness | Scoring | Expects | Latest verdict |
|---|---|---|---|
| fake, vm | must-pass | approval_recorded_by: root; txn: Committed ApplyChange | fake: PASS; VM: not run in this build |
What it exercises
No invariant by name.