Skip to main content

redact

runner_manager_platform::runner_root_access

Function redact 

Source 
pub fn redact(descriptor: &str) -> String
Expand description

A security descriptor with account SIDs reduced to the fact that they are account SIDs.

S-1-5-21-<machine or domain>-<rid> identifies a machine and a user. The well-known trustees do not identify anything — SY and BA are the same two words on every host — so they survive, and what an operator sees is the shape of the access control without a new identity in it.