Stop invalidating the global sudo timestamp on privileged-mode exit #4

New issue

Closed

opened 2026-09-03 07:35:17 +00:00 by phg · 1 comment

phg commented

2026-09-03 07:35:17 +00:00

Owner

Context

PermissionManager.release_sudo currently runs sudo -k when privileged mode ends. That invalidates the user-wide cached sudo timestamp, including authorization acquired outside hosts. Leaving the application mode should release application state without changing process-external sudo state.

This is related to #3, which covers alternative PAM authentication, but it has a separate cause and completion criterion.

Acceptance criteria

Leaving privileged mode does not invoke sudo -k.
Local permission flags and undo/redo session state are still cleared.
Tests verify that exiting privileged mode does not invalidate the global sudo timestamp.
User and contributor documentation reflect the resulting lifecycle.

Context PermissionManager.release_sudo currently runs sudo -k when privileged mode ends. That invalidates the user-wide cached sudo timestamp, including authorization acquired outside hosts. Leaving the application mode should release application state without changing process-external sudo state. This is related to #3, which covers alternative PAM authentication, but it has a separate cause and completion criterion. Acceptance criteria - Leaving privileged mode does not invoke sudo -k. - Local permission flags and undo/redo session state are still cleared. - Tests verify that exiting privileged mode does not invalidate the global sudo timestamp. - User and contributor documentation reflect the resulting lifecycle.