Skip to content

Secure private metadata and database maintenance paths - #2923

Merged
Widthdom merged 4 commits into
mainfrom
codex/fix-issue2868-2869-2879-2882
Jun 2, 2026
Merged

Secure private metadata and database maintenance paths#2923
Widthdom merged 4 commits into
mainfrom
codex/fix-issue2868-2869-2879-2882

Conversation

@Widthdom

@Widthdom Widthdom commented Jun 2, 2026

Copy link
Copy Markdown
Owner

Summary

  • Write CLI/MCP index lock metadata and active workspace state with owner-only POSIX permissions and bounded reads.
  • Force owner-only POSIX permissions for database checkpoint snapshots/manifests and restore staging/backup paths.
  • Update filesystem permission docs and add changelog fragments for each issue.

Validation

  • dotnet test CodeIndex.sln --no-build -p:UseSharedCompilation=false
  • dotnet run --project tools/CodeIndex.Changelog -- check
  • dotnet format CodeIndex.sln --verify-no-changes
  • dotnet ./src/CodeIndex/bin/Debug/net8.0/cdidx.dll status --check --json
  • Manual Codex adversarial review: No blocking/actionable issues found. codex exec review --base origin/main was attempted first, but the local review subprocesses repeatedly failed in this environment before producing findings.

Changelog

  • changelog.d/unreleased/2868.security.md
  • changelog.d/unreleased/2869.security.md
  • changelog.d/unreleased/2879.security.md
  • changelog.d/unreleased/2882.security.md

Fixes #2868
Fixes #2869
Fixes #2879
Fixes #2882

@Widthdom
Widthdom marked this pull request as ready for review June 2, 2026 06:14
@Widthdom
Widthdom merged commit 04c8f89 into main Jun 2, 2026
10 checks passed
@Widthdom
Widthdom deleted the codex/fix-issue2868-2869-2879-2882 branch June 3, 2026 23:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

1 participant