Skip to content

Omgato 0.1.3

Choose a tag to compare

View all tags
@data-goblin data-goblin released this 26 Aug 08:34
· 8 commits to main since this release
v0.1.3
9cae82e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Omgato 0.1.3 completes the local-privilege hardening of runtime state, atomic outputs, process handling, and shared output directories.

Security

  • Anchored private runtime and fallback directories below trusted ancestors, rejecting symlinks, foreign ownership, and unsafe writable parents.
  • Hardened legacy migrations so they move only real files and secured directories without a symlink-following copy fallback.
  • Published logs, state, and configuration updates from exclusively created per-process inodes.
  • Reserved recording, processed-video, and Stream Deck export paths before external tools open them.
  • Removed the shared /tmp fallback for the Hyprland compositor socket.
  • Bound camera holders and overlay signals to stable process identities, including start-time rescans and pidfds.

Fixed

  • Initialised secured state before acquiring resources and returned normally from panel commands so cleanup guards run.
  • Rejected Stream Deck page names that could escape a selected export root.

All four Rust tools and the plugin manifest are versioned 0.1.3.

Full change set: PR #4

Assets 2
Loading