admin 03ab121b25 v0.329.0 (review): an app named like another app's appdata folder gets no root; USERDATA_PATH is always derived, never the app's env ...

Security review of 2fe6341 (same night, before any release). Both red-proofed.

2026-10-17 23:22:54 +02:00

..

allowlist.json

v0.329.0: each app reaches only its own appdata folder; empty allow-list; drive retirement asks the agent first; plain no-durable-id refusal; :latest only for a release

2026-10-17 23:11:56 +02:00

privpolicy_test.go

v0.329.0 (review): an app named like another app's appdata folder gets no root; USERDATA_PATH is always derived, never the app's env

2026-10-17 23:22:54 +02:00

privpolicy.go

v0.329.0 (review): an app named like another app's appdata folder gets no root; USERDATA_PATH is always derived, never the app's env

2026-10-17 23:22:54 +02:00