admin 09ac87a843 v0.328.0 (unreleased): security review round 3 — under HDD_PATH only appdata/ is a data root (not backups/) ...

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-10-17 16:49:17 +02:00

..

allowlist.json

v0.328.0 (unreleased): security review round 2 — nearest-ancestor symlink resolve (fail closed), any extends refused, the entry binds a literal image and its exact healthcheck, no variable in a bind's options

2026-10-17 16:46:32 +02:00

privpolicy_test.go

v0.328.0 (unreleased): security review round 3 — under HDD_PATH only appdata/ is a data root (not backups/)

2026-10-17 16:49:17 +02:00

privpolicy.go

v0.328.0 (unreleased): security review round 3 — under HDD_PATH only appdata/ is a data root (not backups/)

2026-10-17 16:49:17 +02:00