Repository navigation

fix(module): admit the user's private group and name the refused ancestor - #39

Merged

senamakel merged 30 commits into

mainfrom

sentry-top-bugs

Oct 10, 2026

Commits on Oct 9, 2026
- refactor(module): thread private gid through directory refusal check
  
  senamakel
  and
  medullabot
  committed
  df0dd87
- chore(tinybus): add host module tests
  
  senamakel
  and
  medullabot
  committed
  639a7de
- chore: I don't see a diff in your message — the "Diff:" section is empty, and the stat is blank to
  
  senamakel
  and
  medullabot
  committed
  4073b32
- chore: files changed crates/tinybus/Cargo.toml
  
  senamakel
  and
  medullabot
  committed
  494854d
- feat(module): admit group write by the user's private group
  
  senamakel
  and
  medullabot
  committed
  3749f41
- chore(deps): add libc to the lockfile
  
  senamakel
  and
  medullabot
  committed
  18019af
- chore(tinybus): add host module tests
  
  senamakel
  and
  medullabot
  committed
  cb6d31b
- fix(error): correct doc comment for Error::Io
  
  senamakel
  and
  medullabot
  committed
  4876162
- test(tinybus): simplify ancestor and buffer test setup
  
  senamakel
  and
  medullabot
  committed
  722f007
- test(module): reformat ancestor label assertion
  
  senamakel
  and
  medullabot
  committed
  9a015b3
- test(module): add host admission tests
  
  senamakel
  and
  medullabot
  committed
  b7271ea
- docs(module): document unix ownership and refusal details
  
  senamakel
  and
  medullabot
  committed
  59f4bc6
- chore: I don't see a diff in your message — the "Diff:" section is empty, and the stat is blank to
  
  senamakel
  and
  medullabot
  committed
  428f11c
- chore(module): remove unused host module
  
  senamakel
  and
  medullabot
  committed
  7761713
- fix(module): restore host module registration on startup
  
  senamakel
  and
  medullabot
  committed
  a0f170d
- Merge remote-tracking branch 'origin/main' into sentry-top-bugs
  senamakel
  committed
  835d42d
Commits on Oct 10, 2026
- chore: files changed crates/tinybus/src/module/host.rs,crates/tinybus/src/module/host_tests.rs,docs/
  
  senamakel
  and
  medullabot
  committed
  3f892af
- fix(module): treat passwd enumeration errors as incomplete and redact dot-dirs
  
  senamakel
  and
  medullabot
  committed
  79d3df1
- refactor(module): extract host module into its own file
  
  senamakel
  and
  medullabot
  committed
  47fb41c
- refactor(module): rework host permission tests around pure helpers
  
  senamakel
  and
  medullabot
  committed
  c2014ed
- test(module): remove reentrant lookup buffer growth test
  
  senamakel
  and
  medullabot
  committed
  cc50fe3
- fix(module): decide private groups from local account files and ACL-free directories
  
  senamakel
  and
  medullabot
  committed
  87374f8
- fix(module): do not treat nsswitch compat as local accounts
  
  senamakel
  and
  medullabot
  committed
  f96e4b5
- chore: files changed crates/tinybus/src/module/host.rs
  
  senamakel
  and
  medullabot
  committed
  c9315f6
- fix(module): keep the private group closed while systemd user records exist
  
  senamakel
  and
  medullabot
  committed
  0a27710
- fix(module): fail closed on malformed account records and systemd userdb providers
  
  senamakel
  and
  medullabot
  committed
  383beee
- docs(module): private-group admission is Linux-only
  
  senamakel
  and
  medullabot
  committed
  74d0ce5
- fix(module): reject unreadable group records in private group check
  
  senamakel
  and
  medullabot
  committed
  0133ac7
- fix(module): treat initgroups and subordinate gid ranges as non-private
  
  senamakel
  and
  medullabot
  committed
  cd4c0ec
- fix(module): reject duplicate account names and non-local subid providers
  
  senamakel
  and
  medullabot
  committed
  1a570ee

Navigation Menu

Repository navigation

fix(module): admit the user's private group and name the refused ancestor - #39

fix(module): admit the user's private group and name the refused ancestor#39
senamakel merged 30 commits into
mainfrom
sentry-top-bugs

Commits on Oct 9, 2026

refactor(module): thread private gid through directory refusal check

chore(tinybus): add host module tests

chore: I don't see a diff in your message — the "Diff:" section is empty, and the stat is blank to

chore: files changed crates/tinybus/Cargo.toml

feat(module): admit group write by the user's private group

chore(deps): add libc to the lockfile

chore(tinybus): add host module tests

fix(error): correct doc comment for Error::Io

test(tinybus): simplify ancestor and buffer test setup

test(module): reformat ancestor label assertion

test(module): add host admission tests

docs(module): document unix ownership and refusal details

chore: I don't see a diff in your message — the "Diff:" section is empty, and the stat is blank to

chore(module): remove unused host module

fix(module): restore host module registration on startup

Merge remote-tracking branch 'origin/main' into sentry-top-bugs

Commits on Oct 10, 2026

chore: files changed crates/tinybus/src/module/host.rs,crates/tinybus/src/module/host_tests.rs,docs/

fix(module): treat passwd enumeration errors as incomplete and redact dot-dirs

refactor(module): extract host module into its own file

refactor(module): rework host permission tests around pure helpers

test(module): remove reentrant lookup buffer growth test

fix(module): decide private groups from local account files and ACL-free directories

fix(module): do not treat nsswitch compat as local accounts

chore: files changed crates/tinybus/src/module/host.rs

fix(module): keep the private group closed while systemd user records exist

fix(module): fail closed on malformed account records and systemd userdb providers

docs(module): private-group admission is Linux-only

fix(module): reject unreadable group records in private group check

fix(module): treat initgroups and subordinate gid ranges as non-private

fix(module): reject duplicate account names and non-local subid providers