mrtoth
7c9375cd94
Canonicalize blacklist overlay paths to skirt /var/run symlink
2026-04-23 18:47:27 +02:00
mrtoth
7b7294d94e
Follow symlinks when classifying sensitive paths in blacklist mode
2026-04-13 16:49:42 +02:00
mrtoth
99f9395c10
Move require_run_user to lib.rs and make blacklist module private
2026-03-25 23:54:35 +01:00
mrtoth
167439c156
Add fish/nushell history and /tmp leaks to SENSITIVE_PATHS
2026-03-25 23:00:52 +01:00
mrtoth
6349709024
Add container, WM, package manager, and database sockets to SENSITIVE_PATHS
2026-03-25 22:58:12 +01:00
mrtoth
d3f8986b77
Sort dirs before files in resolve_overlays
...
Glob results within a SENSITIVE_PATHS entry could return files before
their parent directory. When that happens the file gets a null-bind
while its siblings remain visible, because the parent hasn't been added
to tmpfs_dirs yet. Sorting dirs first removes this implicit ordering
dependency.
2026-03-25 22:54:56 +01:00
mrtoth
82f84247f1
Rework handling of /run and ${RUNUSER} in blacklist mode
2026-03-25 22:48:39 +01:00
mrtoth
9f82ca21ee
Add /dev/input/ to SENSITIVE_PATHS for blacklist mode
2026-03-25 22:00:32 +01:00
mrtoth
ada9da7ae7
Reject empty HOME envvar
2026-03-20 21:43:08 +01:00
mrtoth
b4b94856ac
Skip run_user overlay when runtime dir is unknown
2026-03-20 19:29:43 +01:00
mrtoth
9da043a70e
Remove redundant /etc/ssh/* glob entry
2026-03-20 19:29:38 +01:00
mrtoth
bf53d92d49
Initial commit
2026-03-20 18:40:08 +01:00
mrtoth