Skip to content

fix: harden IPC file permissions and upgrade minimatch#117

Merged
jdalton merged 1 commit intomainfrom
fix/ipc-security-hardening
Mar 28, 2026
Merged

fix: harden IPC file permissions and upgrade minimatch#117
jdalton merged 1 commit intomainfrom
fix/ipc-security-hardening

Conversation

@jdalton
Copy link
Copy Markdown
Collaborator

@jdalton jdalton commented Mar 28, 2026

Summary

  • Set restrictive permissions on IPC directory (0o700) and stub files (0o600) to prevent other system users from reading/writing sensitive IPC data
  • Treat unparseable stub files as stale during cleanup to prevent accumulation of corrupted files
  • Upgrade minimatch override from 9.0.5 to 9.0.6 for brace-expansion compatibility

Test plan

  • pnpm run fix passes (formatting clean)
  • pnpm run check passes (type-check clean)
  • pnpm test test/unit/ipc.test.mts passes (25/25 tests)
  • CI passes on all matrix combinations

@jdalton jdalton merged commit ff48200 into main Mar 28, 2026
12 checks passed
@jdalton jdalton deleted the fix/ipc-security-hardening branch March 28, 2026 20:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant