Files
felhom.eu/documentation/audits/night-2026-10-18/P1/redproof-userdata-env.txt
T
admin 070cea5bd1
gates / gates (push) Successful in 6m48s
Night 2026-10-18: register (175 -> 173; closed R-981 R-1142 R-1063 R-1069 R-1143 R-994; opened R-1144..R-1147), STATUS morning list, golden 0.329.0 record, evidence, report
Golden 0.329.0 baked at the floor's version, NOT vouched. Hub 0.158.0 built, NOT deployed.
Sunday rotation: no duplicate bake of an unvouched golden at the floor's version.
2026-10-17 23:56:53 +02:00

13 lines
693 B
Plaintext

== RED-PROOF security review 2026-10-18 (box): policyEnv keeps an app-env USERDATA_PATH
allowlist_test.go:97: an app with no drive kept its own USERDATA_PATH "/mnt/felhom-drives/a/felhom-data/appdata" as a root
FAIL
FAIL gitea.dooplex.hu/admin/felhom-controller/internal/stacks 0.009s
FAIL
== RED-PROOF security review 2026-10-18 (box): an app named like a mapped folder owns it
privpolicy_test.go:532: AppdataFolder(paperless) = "paperless" — a template named like paperless-ngx's folder must not own it
privpolicy_test.go:535: a template named paperless was admitted to paperless-ngx's folder
FAIL
FAIL gitea.dooplex.hu/admin/felhom-controller/internal/privpolicy 0.005s
FAIL