GithubFollow/One-KVM
1
0
Fork 0
mirror of https://github.com/mofeng-git/One-KVM.git synced 2025-12-12 01:00:29 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

usc: using kvmd-selfauth group instead of users list

Browse Source
This commit is contained in:
Maxim Devaev 2025-05-18 22:10:50 +03:00
parent c3eed7c497
commit d7963f3271
3 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
configs/os/sysusers.conf
View File

@ -1,4 +1,5 @@
g kvmd - - g kvmd - -
g kvmd-selfauth - -
g kvmd-media - - g kvmd-media - -
g kvmd-pst - - g kvmd-pst - -
g kvmd-ipmi - - g kvmd-ipmi - -
@ -29,8 +30,10 @@ m kvmd-media kvmd
m kvmd-pst kvmd m kvmd-pst kvmd
m kvmd-ipmi kvmd m kvmd-ipmi kvmd
m kvmd-ipmi kvmd-selfauth
m kvmd-vnc kvmd m kvmd-vnc kvmd
m kvmd-vnc kvmd-selfauth
m kvmd-vnc kvmd-certbot m kvmd-vnc kvmd-certbot
m kvmd-janus kvmd m kvmd-janus kvmd

7
kvmd/apps/__init__.py
View File

@ -362,11 +362,8 @@ def _get_config_scheme() -> dict:
"expire": Option(0, type=valid_expire), "expire": Option(0, type=valid_expire),
"usc": { "usc": {
"users": Option([ "users": Option([], type=valid_users_list), # PiKVM username has a same regex as a UNIX username
"kvmd-ipmi", "groups": Option(["kvmd-selfauth"], type=valid_users_list), # groupname has a same regex as a username
"kvmd-vnc",
], type=valid_users_list), # PiKVM username has a same regex as a UNIX username
"groups": Option([], type=valid_users_list), # groupname has a same regex as a username
}, },
"internal": { "internal": {

2
kvmd/apps/kvmd/auth.py
View File

@ -85,7 +85,7 @@ class AuthManager: # pylint: disable=too-many-arguments,too-many-instance-attri
self.__usc_uids = self.__load_usc_uids(usc_users, usc_groups) self.__usc_uids = self.__load_usc_uids(usc_users, usc_groups)
if self.__usc_uids: if self.__usc_uids:
logger.info("Unauth UNIX socket access is allowed for users: %s", logger.info("Selfauth UNIX socket access is allowed for users: %s",
list(self.__usc_uids.values())) list(self.__usc_uids.values()))
self.__unauth_paths = frozenset(unauth_paths) # To speed up self.__unauth_paths = frozenset(unauth_paths) # To speed up