 Codex
|
9577613497
|
fix(openclaw): harden B3 evidence trust and path boundaries
Complete security hardening for B3 evidence collection tool:
Security fixes:
1. Ancestor symlink path escape prevention - reject_symlink_chain()
2. Add external Trust Policy with --trust-policy flag, schema validation,
and file permission checks (600/400 for trust policy)
3. Authority present: false or missing now hard-fails (was soft-fail)
4. Self-review rejection - reviewer must differ from capture/credential
5. SSH signature verification with ssh-keygen -Y verify
6. SFTP trust policy delivery verification
7. Reject_Float nan/infinity in JSON parsing
8. JSON key duplication detection
9. Dirfd atomic writes with O_DIRECTORY|O_NOFOLLOW parent fd
Documentation:
- Updated facts template with trust_policy_key field
- Updated README with new trust policy and security features
- Updated task file with completed verification step
Testing:
- PoC test suite in tools/personal_weixin/tests/ covers:
- symlink ancestor chain detection
- authority present:false hard fail
- self-review rejection (same as capture, same as credential)
- authority missing present key
- trust policy permissive permissions rejection
- trust policy missing/invalid/schema validation failures
No gitleaks findings in modified files.
|
2026-07-16 15:37:46 +08:00 |
|