extra-sandbox-paths -> extra-sandbox-paths-{ro,rw} #210

New issue

Open

opened 2024-04-02 15:28:31 +00:00 by jade · 0 comments

jade commented

2024-04-02 15:28:31 +00:00

Owner

plan:

implement ro/rw variants also documented to take :options at the end of each path
emit deprecation warning on the old one while treating it as rw
eventually treat it as ro by default or remove it

it's our observation that extra sandbox paths is a massive security hole if they're writable, and significantly less if not. however the default at the moment is read write with no obvious way to override it. we should do better. plan: - implement ro/rw variants also documented to take :options at the end of each path - emit deprecation warning on the old one while treating it as rw - eventually treat it as ro by default or remove it

jade added the

stability

label 2024-04-02 15:28:31 +00:00

jade added the

Area/store

label 2024-05-10 18:11:30 +00:00

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: lix-project/lix#210

No description provided.