Security burn-down update: govoplan-files#27 runtime validation passed on the Docker host and the issue is now closed pending push. The SMB dev container runs as non-root and the signed…
Runtime validation passed after the non-root SMB image iteration.
Validated by user on the Docker host:
- container starts as
uid=1000(govoplan) gid=1000(govoplan) - Samba passdb contains…
Security burn-down update: govoplan-core#242 is implemented and closed locally/Gitea pending push. govoplan-files#27 has a non-root SMB dev-container attempt implemented locally, but remains…
Implemented a non-root SMB dev-container attempt locally and leaving this open until runtime validation is possible.
Changes made:
dev/connectors/smb/Dockerfilenow creates and switches to…
Implemented locally. import_object now validates module:attribute paths, rejects private/invalid attribute paths, and only imports modules from trusted prefixes (govoplan_core, govoplan_,…
Codex State: progress
Summary
Security burn-down batch completed locally:
- Closed
govoplan#1: meta release/Gitea tooling shell and URL trust boundaries fixed. - Closed `govoplan-core#2…
Codex State: note
Summary
- Reviewed
dev/connectors/smb/Dockerfileandentrypoint.sh. - I did not change it in this batch because the container currently creates Samba users/passdb…
Codex State: done
Summary
- Replaced dynamic
RegExpcell splitting with separator-set scanning. - Replaced dynamic placeholder replacement regexes with one static placeholder parser and…
Codex State: done
Summary
- Removed dynamic table-name SQL in legacy mail policy subject lookup by splitting user/group queries into fixed SQL statements.
- Replaced frontend wildcard…
Codex State: done
Summary
- Enforced absolute HTTP(S), hostname, and no embedded credentials for CalDAV collection URLs and generic calendar sync HTTP requests.
- Added validation…