5 Commits

Include renames

Author	SHA1	Message	Date
TapTap	c944787e03	refactor: remove dead file_store subsystem and unused wrappers	2026-09-13 05:19:18 +02:00
TapTap	abad1664ba	security(shared): fix -K TOCTOU, ssh old-args quoting, TLS opts, secret-file perms, sparse dedup ... - file: open -K dirlink referents via a race-safe relative O_NOFOLLOW walk from the authorized-root fd instead of re-opening an absolute realpath() result (removes the intermediate-symlink swap TOCTOU). - transport_ssh: always single-quote the server path, including --old-args, so no mode can inject shell metacharacters. - transport_tls: set SSL_OP_NO_COMPRESSION and (guarded) SSL_OP_NO_RENEGOTIATION. - credentials: reject --password-file/--early-input with any group/other permission bit; chmod 0600 the affected test fixtures. - file_store: export file_store_write_sparse() and remove the verbatim file.c duplicate.	2026-09-12 15:01:48 +02:00
TapTap	36a373ff5d	Add executability preservation option	2026-09-03 17:39:50 +02:00
TapTap	7cffff0b8b	fix: fail closed on authorization setup failure	2026-08-15 20:02:09 +02:00
TapTap	8cca891b9a	refactor: split transfer and protocol responsibilities	2026-08-15 12:27:18 +02:00