diff options
| author | Dan Duvall <dduvall@wikimedia.org> | 2018-03-09 14:33:13 -0800 |
|---|---|---|
| committer | Dan Duvall <dduvall@wikimedia.org> | 2018-03-22 14:02:43 -0700 |
| commit | cffb77e9dbb14db23ed11c24c68579bd75891f9d (patch) | |
| tree | c6eeb40099dc933cccd7b8a83b88f3156ffe9e39 /config/policy.go | |
| parent | 50c5793952a725b5629c5dcd82f26b92716e628a (diff) | |
| download | blubber-cffb77e9dbb14db23ed11c24c68579bd75891f9d.tar.gz | |
Provide a `runs.insecurely` to be used with test variants
Summary:
Use cases involving running of test suites and doc generation require
more liberal ownership and read/write permission to application files.
When `runs.insecurely` is set to `true`, the effective runtime user will
be `lives.as`, the same user that owns the application files and
installed dependencies.
D999 is a complement to this change to allow restrictions on this and
other potentially sensitive configuration.
Depends on D999, D1002
Test Plan: Run `go test ./...`.
Reviewers: thcipriani, mmodell, hashar, #release-engineering-team, demon
Reviewed By: thcipriani, #release-engineering-team
Tags: #release-engineering-team
Differential Revision: https://phabricator.wikimedia.org/D1003
Diffstat (limited to 'config/policy.go')
0 files changed, 0 insertions, 0 deletions