Repository navigation
test(windows): deny AppContainer parent traversal reads - #56
Merged
Merged
Conversation
Update the vendored tinybus submodule to a newer revision. Auto-committed-on: cuttlefish Co-authored-by: Medulla <medulla@tinyhumans.ai>
Add a Windows AppContainer test that grants a root and then attempts to read a secret outside it through a `..` traversal path, asserting the child is denied and the secret never appears in its output. A companion child probe reports whether the read succeeded so the parent test can distinguish denial from a crash. Auto-committed-on: cuttlefish Co-authored-by: Medulla <medulla@tinyhumans.ai>
Update the vendored tinybus submodule to the latest upstream commit. Auto-committed-on: cuttlefish Co-authored-by: Medulla <medulla@tinyhumans.ai>
This was referenced Oct 24, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds a Windows-only live AppContainer probe that tries to read a sibling secret through
..from the granted working directory. The test first confirms the host can resolve the same relative path, then launches a child inside AppContainer and asserts the secret remains unreadable. The child process is bounded by a 10-second timeout.Public API or behavior changes: none. The test covers the existing AppContainer confinement contract. Windows CPU limits remain explicitly unsupported and are deferred.
Validation:
cargo fmt --all -- --check— passed.cargo check --locked --offline --target x86_64-pc-windows-gnu -p tinybox-jail --tests— passed, including the Windows-only probe.cargo clippy --locked --offline --target x86_64-pc-windows-gnu -p tinybox-jail --all-targets -- -D warnings— blocked by existing warnings inwindows_tests.rs(too_many_linesinappcontainer_owned_termination_stops_descendants_after_parent_exitandused_underscore_bindingin the descendant probe).Part of tinyhumansai#27 and tinyhumansai/openhuman#7328.