Claude
07e7d2866f
The kiosk app can end up with the no-new-privileges flag, after which sudo
refuses to run ("The no new privileges flag is set"). The helper is now
served over a root-owned, kiosk-group-only unix socket (systemd socket
activation); sudo stays as a fallback. With several WiFi adapters the screen
shows a dropdown and lists all of them; status/scan/connect take an iface.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013wi3ZQveYdjfcrEsyazq32
15 lines
328 B
SYSTEMD
15 lines
328 B
SYSTEMD
[Unit]
|
|
Description=Kiosk WiFi helper socket (used by the kiosk app's WiFi screen)
|
|
|
|
[Socket]
|
|
ListenStream=/run/kiosk-wifi-helper.sock
|
|
SocketUser=root
|
|
# Replaced with the kiosk user's group when installed (lib/provision.sh).
|
|
SocketGroup=@KIOSK_GROUP@
|
|
SocketMode=0660
|
|
Accept=yes
|
|
MaxConnections=4
|
|
|
|
[Install]
|
|
WantedBy=sockets.target
|