Repository navigation

#667 [security][tools] OS の隔離の中から制御端末へ TIOCSTI で入力を注入でき、/dev/pts の他の端末へ書ける - #674

Merged

Kewton merged 8 commits into

feature/issue-667-security-tools-os-tiocsti-dev-pts

Oct 14, 2026

Merged

#667 [security][tools] OS の隔離の中から制御端末へ TIOCSTI で入力を注入でき、/dev/pts の他の端末へ書ける#674
Kewton merged 8 commits into
developfrom
feature/issue-667-security-tools-os-tiocsti-dev-pts

Commits on Oct 13, 2026
- fix(tools): detach sandboxed children from the controlling terminal
  
  Kewton
  and
  CommandCodeBot
  committed
  f85c737
- fix(tools): detach a terminal stdin for bounded children
  
  Kewton
  and
  CommandCodeBot
  committed
  3e6158c
Commits on Oct 14, 2026
- test(tools): detect a leaked /dev/null descriptor for a terminal stdin
  
  Kewton
  and
  CommandCodeBot
  committed
  569e85d
- fix(tools): deny reading the run terminal from inside the sandbox
  
  Kewton
  and
  CommandCodeBot
  committed
  0e0cada
- test(tools): pin the terminal device selection in the landlock read deny
  
  Kewton
  and
  CommandCodeBot
  committed
  2b3223b
- docs(tools): correct the pty allocation claim for the sandbox
  
  Kewton
  and
  CommandCodeBot
  committed
  56c6768
- test(tools): print the TIOCSTI unverified verdict on stdout
  
  Kewton
  and
  CommandCodeBot
  committed
  4648597
- Merge remote-tracking branch 'origin/develop' into feature/issue-667-security-tools-os-tiocsti-dev-pts
  Kewton
  committed
  d11a923