mirror of https://github.com/NVIDIA/OpenShell.git synced 2026-10-29 07:23:25 +08:00

Files

T

Eric CurtinandJohn Myers 3f12bdc63f fix(server): audit proposal rejections in the gateway (#4281 )

* fix(server): audit proposal rejections in the gateway

Signed-off-by: Eric Curtin <eric.curtin@docker.com>

* fix(ocsf): show rejection details in CONFIG shorthand

Signed-off-by: Eric Curtin <eric.curtin@docker.com>

* fix(server): attribute rejection audits to operator principals

Signed-off-by: John Myers <9696606+johntmyers@users.noreply.github.com>

---------

Signed-off-by: Eric Curtin <eric.curtin@docker.com>
Signed-off-by: John Myers <9696606+johntmyers@users.noreply.github.com>
Co-authored-by: John Myers <9696606+johntmyers@users.noreply.github.com>

2026-10-13 00:01:58 +00:00

data

fix(policy): share endpoint path matching between Rust and Rego (#4336 )

2026-10-08 23:52:46 +00:00

src

fix(server): audit proposal rejections in the gateway (#4281 )

2026-10-13 00:01:58 +00:00

testdata

refactor(openshell-sandbox): Split sandbox into process and network subcrates. (#1650 )

2026-06-15 15:16:23 -04:00

tests

refactor(runtime): confine and reduce unsafe code (#4130 )

2026-10-10 01:12:03 +00:00

Cargo.toml

refactor(runtime): confine and reduce unsafe code (#4130 )

2026-10-10 01:12:03 +00:00

README.md

refactor(runtime): confine and reduce unsafe code (#4130 )

2026-10-10 01:12:03 +00:00

README.md

Network supervisor

This crate forbids unsafe code, including its local tests. Typed socket APIs provide original-destination lookup for transparent proxying.

Socket attribution tests pass a duplicate connected socket as a spawned child's stdin. Re-executing the test binary checks multiple holders with the same binary identity; executing a different binary checks ambiguous shared-socket identity. The fixture kills and reaps the child when the parent test ends.

The manual proxy performance baseline still counts allocations. Its test-only global allocator uses openshell-driver-vm::allocation_tracking; the unsafe allocator implementation belongs to the VM crate. The VM dependency disables default features, so this instrumentation does not require the compute runtime or Unix-only sandbox library. It is a development dependency only.