Andrew Tridgell de9000eb30 testsuite: add files-from-leak module-confinement test ...

Differential test for the daemon files-from/backup-symlink out-of-module read.
It races a --backup-dir push against a parent-swap flipper until a root-owned
backup symlink to an out-of-module secret lands in the backup tree, then tries
--files-from=:backup/sub/<name> and fails if the secret's content is read back
as the file list.  RED before the module-root confinement, GREEN after.

Requires root plus an untrusted uid to plant the cross-uid symlink; skips
otherwise.  Registered in the Cygwin expected-skip list.

Based on a report and proof-of-concept test by seks99x.

2026-07-23 08:28:36 +10:00

..

workflows

testsuite: add files-from-leak module-confinement test

2026-07-23 08:28:36 +10:00

FUNDING.yml

fix funding github username

2026-06-15 13:58:46 +10:00