4 Commits

Include renames

Author	SHA1	Message	Date
jschoubben	16d7b1898d	Mark the packages whose tests read files outside their directory, found by the review (issue 1935)	2026-10-24 04:38:49 +02:00
jochen	b240085e0a	Close the review's gaps round the agent account (hq ADR 0266) ... The managed settings apply to every account's claude, so a key-helper script under the agent's home would run as the operator, and through sudo as root: the command is now carried whole in the root-owned managed settings and reads the key only as the agent. The helper reads only a regular file, bounded, without blocking, and a request it does not answer fails in time instead of holding every later one; a directory entry it answers that is not a name is refused. The guard's record is matched on its binary in the query, a half-named agent account is not taken as the operator's, the kept API key stays until the agent's home holds one, restic refuses to restore beside a directory others may write, and the agent-home check cleans a path before judging it.	2026-10-09 23:48:15 +02:00
jochen	6d32975ca6	Refuse the agent-home gap reached through a module's own directory or a literal home ... A path written as ${dir:<id>} can resolve under the agent's home, and a literal /home path may be it; both escaped the check (hq ADR 0266).	2026-10-09 10:14:25 +02:00
jochen	87862f3bf5	Refuse an archive or a file written into under the agent's home ... The node-engine writes those as root after checking the path, and the agent account owns its home and could swap a link in between (hq ADR 0266). No module does it today; this keeps a future one from opening the gap.	2026-10-09 10:14:25 +02:00