kyleandClaude Opus 5.5 ba369f82ba brokerd: refuse / and a symbolic link as a socket's directory ...

brokerd makes a socket's directory 0700. With a socket directly in / it would
chmod /, and through a symbolic link it would change the link's target. Both
are now refused at start with #brokerd-start-failed. Without the fix the link
case started and served, with the shared directory made private.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-09-22 21:44:29 -07:00

..

fixtures

Load grant files, failing closed on any invalid file

2026-09-19 02:50:26 -07:00

support

brokerd tests: read the final frame after the handler closes, on macOS

2026-09-22 18:28:18 -07:00

admin.rs

Handle approvals, refusals and grant checks on admin.sock

2026-09-20 13:54:01 -07:00

approvals.rs

Add the table of pending approvals

2026-09-19 16:48:09 -07:00

args.rs

Add typed tool arguments and the form checks for paths, hosts and URLs

2026-09-19 02:37:31 -07:00

audit_edges.rs

Audit writer: open a record-less log, share the log-name rule, keep the lock file

2026-09-22 21:05:13 -07:00

audit_startup.rs

Add the audit writer with its startup check

2026-09-19 16:32:37 -07:00

audit.rs

Add the audit writer with its startup check

2026-09-19 16:32:37 -07:00

broker_pending.rs

Handle a tool request from decision to answer

2026-09-20 12:59:42 -07:00

broker_sequence.rs

Handle a tool request from decision to answer

2026-09-20 12:59:42 -07:00

broker.rs

Handle a tool request from decision to answer

2026-09-20 12:59:42 -07:00

config.rs

Add brokerd's configuration

2026-09-19 02:24:15 -07:00

grants.rs

Load grant files, failing closed on any invalid file

2026-09-19 02:50:26 -07:00

ledger_answer.rs

Add the ledger: the audit writer and session state behind one lock

2026-09-20 03:30:37 -07:00

ledger.rs

Add the ledger: the audit writer and session state behind one lock

2026-09-20 03:30:37 -07:00

policy_matching.rs

Decide tool calls against grants, taint and time

2026-09-19 03:05:01 -07:00

policy_property.rs

Decide tool calls against grants, taint and time

2026-09-19 03:05:01 -07:00

policy_redecide.rs

Decide tool calls against grants, taint and time

2026-09-19 03:05:01 -07:00

policy.rs

Decide tool calls against grants, taint and time

2026-09-19 03:05:01 -07:00

runner.rs

Replace the runner stub with the Runtime seam and RunSpec

2026-09-19 16:43:56 -07:00

serve_pointers.rs

brokerd: refuse / and a symbolic link as a socket's directory

2026-09-22 21:44:29 -07:00

serve.rs

Add brokerd serve: startup, both sockets, and the expiry thread

2026-09-20 17:24:57 -07:00

state.rs

Keep each session's taint and untrusted flag in a file

2026-09-19 03:08:46 -07:00