Skip to content

v0.13.27 — close 2 SUDO_UID gate-forge holes (DIVE-1401 withdraw + DIVE-1413 answer-path)

Choose a tag to compare

View all tags
@lodar lodar released this 23 Jul 17:16
v0.13.27
8a3acf9
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security: a non-root agent could forge SUDO_UID= to clear a human-evidence gate (approval/secret/manual) or spoof the withdraw actor as human. Both paths now trust SUDO_* only at EUID 0; off-root they judge by the unspoofable real uid. Legit human paths (dashboard/shelld exec run as claude; root secret-drop) still clear. Verified on-box in genuine uid/EUID contexts (8/8 forge-reject + legit-clear). DIVE-1831.

Assets 2
Loading