Skip to content

v1.1.0

Choose a tag to compare

View all tags
@sonirico sonirico released this 13 Sep 13:43
· 3 commits to master since this release
v1.1.0
44d154c

Features

  • security: confine child process execution with a Landlock sandbox

Every secure-mode child (git tools, run_script) now runs under a Landlock domain that allows writes only inside working_directory and denies all TCP connect/bind. The server re-execs itself as a one-shot shim that applies the ruleset and execs the real target; the domain is inherited across exec and cannot be relaxed.

This closes the residual class behind GHSA-c598: any future vector inside an executed program is confined to what the filesystem tools already allow, with no network. Kernel-enforced, not a denylist.

Best-effort on the kernel ABI, no-op off Linux. Controlled by security.sandbox, default true. Operator scripts that must write outside the workspace need security.sandbox: false.

Assets 2
Loading