4 Commits

Include renames

Author	SHA1	Message	Date
TapTap	e3840c8326	fix(p8-security): enforce daemon ownership policy, gate fake-super replay, drop implicit numeric-ids, make copy-as failures per-entry ... A1: daemon refuses every client-chosen ownership/super-user request (--numeric-ids/--chown/--usermap/--groupmap/--fake-super/--copy-as/--super) unless the selected module opts in with 'client owner = yes'. A2: fake-super owner replay requires an explicit ownership identity policy. A3: --super no longer implies --numeric-ids (ownership stays opt-in). A5: a failed --copy-as chown marks the entry failed instead of reporting success with the wrong owner.	2026-09-12 14:00:55 +02:00
TapTap	fdc0f238c9	fix(p7-privilege): harden copy-as/super gates, own dirs/specials ... - fake-super owner replay honors --no-super and an active --copy-as - copy-as/identity ownership now applied to directories and special nodes - reject copy_as_set && !use_metadata (receiver + client --no-preserve) - daemon refuses --copy-as; add server-side --no-super operator veto - implement identity_copy_as_refused/identity_copy_as_active - reject copy-as ids that overflow int32; escape spec in log errors - copy-as chown EPERM/EACCES logged at ERROR (still non-fatal) - identity_wire_valid copy-as bounds; CLI help and RSYNC_COMPAT docs - add unit tests and root-gated integration coverage	2026-09-12 12:34:43 +02:00
TapTap	dd5ae60459	feat(d5-daemon-auth): password auth, --password-file, --early-input	2026-09-10 12:50:56 +02:00
TapTap	b3d7d64347	feat(d5-daemon-core): daemon lifecycle, module config, ::dest, PROTOCOL 2.15.0	2026-09-09 17:48:07 +02:00