From c1fab380760fd43eaf1586a319ee429cca6093ed Mon Sep 17 00:00:00 2001 From: "Theodor S. Midtlien" Date: Fri, 11 Sep 2026 17:24:17 +0200 Subject: [PATCH] Only default profile fail open --- client/internal/profilemanager/profilemanager.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/client/internal/profilemanager/profilemanager.go b/client/internal/profilemanager/profilemanager.go index b93663828..0ee037a3c 100644 --- a/client/internal/profilemanager/profilemanager.go +++ b/client/internal/profilemanager/profilemanager.go @@ -51,7 +51,7 @@ func (p *Profile) AccessibleBy(id ipcauth.Identity) bool { // A profile in a per-username directory belonged to a use, unowned fails // closed. The account named by the directory reclaims it on their next // lookup or until claimed by a privileged caller. - return p.LegacyUserDir == "" + return p.LegacyUserDir == "" && p.ID == DefaultProfileName } return p.Owners[0].Matches(id) }