mosaicstack/stack-mos-dt-0
1
0
Fork 0
forked from mosaicstack/stack
Code Pull Requests Activity

fix(fleet): bind secure reads to descriptors

Browse Source 
Co-Authored-By: Claude Opus 4.8 <[email protected]>
This commit is contained in:
Jarvis
2026-07-15 19:08:29 -05:00
co-authored by Claude Opus 4.8
parent 0dc47cac92
commit dd7f8a77a0
4 changed files with 266 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/fleet/FLEET-LAUNCH.md
+4
View File
@@ -68,6 +68,10 @@ the shell sidecar only provides fallback state when the native marker is stale o
`mosaic agent comms-block <exact-member>` can inspect that exact roster member's resolved Fleet-Comms
block. It is a read-only inspection tool and fails loudly for an unknown exact member or missing roster.
On Linux, the installed roster, TOOLS contract, and executable helper are opened through a held
descriptor chain rooted at `/`; every managed path component uses no-follow traversal, and content plus
execute validation stay bound to the same opened file. Systems without Linux `/proc/self/fd` support
fail closed rather than falling back to pathname revalidation.
## Current M2 boundary