TapTap
b216ed31fb
fix(p8-security): close review gaps in the ownership gate and copy-as failure propagation
...
- H3: a daemon module without 'client owner = yes' now also has super-user
device activity forced off (char/block mknod, --write-devices), so a root
daemon can no longer be made to create/write raw devices under AUTO. The
entries are skipped, preserving ordinary -a pushes.
- H1/H2: propagate a failed required --copy-as chown from symlink metadata
restore and implicitly-created parent directories, so the entry (and run)
reports failure instead of a wrong-owner success.
- Docs/help/headers updated for A2/A3 and the device clamp; startup warning
spells out the client-owner risk.
- Tests: daemon device clamp (skipped without opt-in, created with opt-in),
updated --super/--fake-super expectations.
2026-09-12 14:18:03 +02:00
..
2026-07-20 14:44:41 +02:00
2026-09-12 14:18:03 +02:00
2026-09-08 17:25:56 +02:00
2026-09-10 21:40:07 +02:00
2026-08-16 09:37:28 +02:00
2026-06-10 16:58:35 +02:00
2026-09-10 22:05:18 +02:00
2026-09-10 21:40:07 +02:00
2026-09-06 12:34:10 +02:00
2026-09-06 12:34:10 +02:00
2026-09-07 19:50:52 +02:00
2026-09-07 17:42:53 +02:00
2026-09-08 22:53:47 +02:00
2026-06-10 16:58:35 +02:00
2026-09-12 12:34:43 +02:00
2026-07-29 19:19:19 +02:00
2026-09-05 02:01:43 +02:00
2026-07-04 21:25:34 +02:00
2026-09-12 14:00:55 +02:00
2026-06-10 16:58:35 +02:00
2026-09-10 13:20:42 +02:00
2026-09-10 12:50:56 +02:00
2026-09-12 14:00:55 +02:00
2026-09-09 17:48:07 +02:00
2026-07-20 19:42:53 +02:00
2026-07-20 14:44:35 +02:00
2026-09-06 14:19:18 +02:00
2026-09-06 13:20:03 +02:00
2026-09-07 17:42:53 +02:00
2026-07-18 20:00:15 +02:00
2026-08-30 13:50:42 +02:00
2026-07-20 19:42:53 +02:00
2026-09-12 11:22:23 +02:00
2026-09-09 14:23:59 +02:00
2026-09-08 20:58:56 +02:00
2026-07-29 19:19:19 +02:00
2026-07-20 19:42:53 +02:00
2026-07-20 14:44:35 +02:00
2026-09-10 17:49:29 +02:00
2026-09-10 17:13:06 +02:00
2026-09-03 16:07:51 +02:00
2026-07-20 19:42:53 +02:00
2026-09-12 11:06:05 +02:00
2026-07-20 14:44:35 +02:00
2026-09-10 13:52:24 +02:00
2026-09-10 13:52:24 +02:00
2026-09-06 16:27:54 +02:00
2026-07-20 19:42:53 +02:00
2026-09-01 20:46:07 +02:00
2026-07-20 14:44:35 +02:00
2026-09-06 19:35:25 +02:00
2026-07-20 14:44:35 +02:00
2026-08-16 09:37:28 +02:00
2026-06-10 16:58:35 +02:00
2026-09-04 02:25:26 +02:00
2026-07-20 14:44:35 +02:00
2026-09-12 11:06:05 +02:00
2026-07-04 21:25:34 +02:00
2026-09-12 12:34:43 +02:00
2026-09-09 17:48:07 +02:00
2026-09-07 18:33:34 +02:00
2026-07-29 19:19:19 +02:00
2026-09-07 15:43:33 +02:00
2026-06-10 16:58:35 +02:00
2026-09-10 17:39:34 +02:00
2026-09-10 16:27:49 +02:00
2026-08-16 09:37:28 +02:00
2026-07-20 14:44:35 +02:00
2026-09-09 14:35:26 +02:00
2026-07-21 16:55:07 +02:00
2026-09-09 14:29:46 +02:00
2026-07-21 16:55:07 +02:00
2026-07-29 19:19:19 +02:00
2026-07-21 16:55:07 +02:00
2026-07-20 21:04:53 +02:00
2026-09-12 14:00:55 +02:00
2026-09-08 22:27:53 +02:00