Skip to content

OmaSettings 1.0.2

Choose a tag to compare

View all tags
@twiking twiking released this 24 Aug 07:07
· 40 commits to main since this release
v1.0.2
146d092

Follow-up hardening from the omarchyplugins.com security review:

  • Reads of other people's files open the file first and verify the descriptor, bounded in time and in bytes. A path that turns into a symlink, a FIFO or an oversized file between the check and the open cannot redirect, block or exhaust the read.
  • Every state producer is bounded at the producer, and the helper caps its own output as well.
  • A write to a path that is not a regular file is refused rather than attempted.
  • A config symlinked into a dotfiles repo now has its target updated instead of the link being replaced.
Assets 2
Loading