fix(sandbox): deny SSH private keys and the GPG keyring - #990

Closed

cairn-intern wants to merge 14 commits into

Gitlawb:mainfrom

cairn-intern:fix/815-ssh-gpg-deny

Commits on Sep 1, 2026

fix(sandbox): deny SSH private keys and the GPG keyring
cairn-intern
committed
1d46ee9
fix(sandbox): expand SSH %d and keep lexical credential denies
cairn-intern
committed
e1b5161
fix(sandbox): keep lexical credential denies through bwrap and Seatbelt
cairn-intern
committed
eea3fde
fix(sandbox): follow SSH config symlinks and keep lexical dir dests
cairn-intern
committed
5774d33
fix(sandbox): dual-add lexical dests only when a symlink is involved
cairn-intern
committed
6536486
fix(sandbox): bound SSH walks and honor nested GPG allowRead
cairn-intern
committed
cfb8965
fix(sandbox): sniff .pub keys, expand ${HOME}, mask symlink dests
cairn-intern
committed
8550f7b
fix(sandbox): skip overlaid file binds and sniff named keys
cairn-intern
committed
9111fb3
fix(sandbox): bind when overlay fails; sniff named IdentityFiles
cairn-intern
committed
abf7671
fix(sandbox): deny GNUPGHOME and unify bwrap dest spellings
cairn-intern
committed
64b0e70
fix(sandbox): remove unused appendUnreadableLinuxPathArgs helper
cairn-intern
committed
8c2e861
fix(sandbox): normalize dangling symlink assertion and narrow tmpfs parent check
cairn-intern
committed
8620515
fix(sandbox): traverse directory symlinks, support OpenSSH escape/env syntax, and preserve granular carveouts
cairn-intern
committed
25974e9

Commits on Sep 2, 2026

test(sandbox): skip symlink tests gracefully when symlinks are unpermitted
cairn-intern
committed
eb19663