fix(sandbox): deny SSH keys and GPG stores with fail-closed discovery - #1011

Closed

euxaristia wants to merge 23 commits into

Twigpine:mainfrom

euxaristia:fix/815-ssh-gpg-deny

Commits on Sep 15, 2026

fix(sandbox): deny SSH private keys and the GPG keyring

cairn-intern
authored and
euxaristia
committed
423f7ee
fix(sandbox): expand SSH %d and keep lexical credential denies

cairn-intern
authored and
euxaristia
committed
64907f1
fix(sandbox): keep lexical credential denies through bwrap and Seatbelt

cairn-intern
authored and
euxaristia
committed
470dbc0
fix(sandbox): follow SSH config symlinks and keep lexical dir dests

cairn-intern
authored and
euxaristia
committed
4571410
fix(sandbox): dual-add lexical dests only when a symlink is involved

cairn-intern
authored and
euxaristia
committed
29d560b
fix(sandbox): bound SSH walks and honor nested GPG allowRead

cairn-intern
authored and
euxaristia
committed
571dfde
fix(sandbox): sniff .pub keys, expand ${HOME}, mask symlink dests

cairn-intern
authored and
euxaristia
committed
dc9c168
fix(sandbox): skip overlaid file binds and sniff named keys

cairn-intern
authored and
euxaristia
committed
b76002e
fix(sandbox): bind when overlay fails; sniff named IdentityFiles

cairn-intern
authored and
euxaristia
committed
5f7f6b4
fix(sandbox): deny GNUPGHOME and unify bwrap dest spellings

cairn-intern
authored and
euxaristia
committed
b875b61
fix(sandbox): remove unused appendUnreadableLinuxPathArgs helper

cairn-intern
authored and
euxaristia
committed
bd0589c
fix(sandbox): normalize dangling symlink assertion and narrow tmpfs parent check

cairn-intern
authored and
euxaristia
committed
4beb32b
fix(sandbox): traverse directory symlinks, support OpenSSH escape/env syntax, and preserve granular carveouts

cairn-intern
authored and
euxaristia
committed
a6f8531
test(sandbox): skip symlink tests gracefully when symlinks are unpermitted

cairn-intern
authored and
euxaristia
committed
5677bf8
Preserve parent denies on nested grants and canonicalize test paths
euxaristia
committed
a68d043
Normalize policy golden baseline for lexical credential symlinks
euxaristia
committed
29fac7c
Refuse sandbox execution when credential protection is incomplete.
euxaristia
committed
99d4bcb
Release degraded command plan leases in metadata test. Refs #815
euxaristia
committed
29addbd
Page SSH discovery to preserve protection in large directories.
euxaristia
committed
be8d5b3
fix(sandbox): resolve SSH config path variables from command environment
euxaristia
committed
5076e9b
fix(sandbox): address review findings on SSH key discovery and config resolution
euxaristia
committed
ac80d1f
fix(sandbox): support symlinked SSH dirs and canonicalize test candidates
euxaristia
committed
2dc8dcb

Commits on Sep 18, 2026

fix(sandbox): bound directory-symlink traversal in SSH key discovery
euxaristia
committed
b7bb06b

Navigation Menu

fix(sandbox): deny SSH keys and GPG stores with fail-closed discovery - #1011

fix(sandbox): deny SSH keys and GPG stores with fail-closed discovery#1011
euxaristia wants to merge 23 commits into
Twigpine:mainfrom
euxaristia:fix/815-ssh-gpg-deny

Commits on Sep 15, 2026

fix(sandbox): deny SSH private keys and the GPG keyring

fix(sandbox): expand SSH %d and keep lexical credential denies

fix(sandbox): keep lexical credential denies through bwrap and Seatbelt

fix(sandbox): follow SSH config symlinks and keep lexical dir dests

fix(sandbox): dual-add lexical dests only when a symlink is involved

fix(sandbox): bound SSH walks and honor nested GPG allowRead

fix(sandbox): sniff .pub keys, expand ${HOME}, mask symlink dests

fix(sandbox): skip overlaid file binds and sniff named keys

fix(sandbox): bind when overlay fails; sniff named IdentityFiles

fix(sandbox): deny GNUPGHOME and unify bwrap dest spellings

fix(sandbox): remove unused appendUnreadableLinuxPathArgs helper

fix(sandbox): normalize dangling symlink assertion and narrow tmpfs parent check

fix(sandbox): traverse directory symlinks, support OpenSSH escape/env syntax, and preserve granular carveouts

test(sandbox): skip symlink tests gracefully when symlinks are unpermitted

Preserve parent denies on nested grants and canonicalize test paths

Normalize policy golden baseline for lexical credential symlinks

Refuse sandbox execution when credential protection is incomplete.

Release degraded command plan leases in metadata test. Refs #815

Page SSH discovery to preserve protection in large directories.

fix(sandbox): resolve SSH config path variables from command environment

fix(sandbox): address review findings on SSH key discovery and config resolution

fix(sandbox): support symlinked SSH dirs and canonicalize test candidates

Commits on Sep 18, 2026

fix(sandbox): bound directory-symlink traversal in SSH key discovery