Skip to content

stagent v0.7.1

Choose a tag to compare

View all tags
@obutora obutora released this 07 Oct 03:06
v0.7.1
1406849

Security

  • On macOS, stagent now also refuses connections from processes in a
    sandbox (Seatbelt), as Claude Code and Codex run their commands. The
    macOS sandbox has no PID namespace, so a sandboxed command allowed to
    reach ~/.ssh-term/agent/run (sandbox.network.allowUnixSockets)
    could double fork (or setsid) out of the agent's process tree, and
    so past the parent walk of 0.7.0, while staying sandboxed. Such a
    connection, and one handed to such a child, now gets agent_refused
    as a holder or the daemon answers an agent's; hooks and reads are
    still served. stagent asks sandbox_check, which Apple does not
    document; if a macOS lacks it or it answers otherwise, this check is
    left out and the parent walk alone decides, as in 0.7.0 (ADR 0004,
    #415).

stagent 0.7.1 — server binary for SSH Term. Built from this tag (1406849) with go1.26.1 via scripts/release.sh (reproducible: CGO_ENABLED=0, -trimpath, no VCS stamp, empty build id); verify downloads against SHA256SUMS.

Assets 9
Loading