fix: verify confined file identities - #263

Merged

lzehrung merged 8 commits into

mainfrom

fix/confined-file-open-verify

Aug 16, 2026

Commits on Aug 16, 2026

fix: close confined-file TOCTOU with open-then-verify
lzehrung
committed
a4db192
fix: bind confined reads to verified identity
lzehrung
committed
bf7b0b4
fix: verify all confined read identities
lzehrung
committed
f5ee839
fix: classify rename file races correctly
lzehrung
committed
d9ea174
fix: generalize confined-file error message and TOCTOU test comment
lzehrung
committed
91df095
fix: use 64-bit inode identity and prevent FIFO-swap open hang
lzehrung
committed
d8abb71
fix: make lstat mock produce BigIntStats in fallback identity test
lzehrung
committed
3af6c3c
fix: require birth-time match for TOCTOU identity and close test blind spots
lzehrung
committed
c922188