John T. MyersandJohn Myers 5e7a2f2dd8 fix(sandbox): verify effective UID/GID after privilege drop (#132) ...

Closes #32

Add post-condition checks in drop_privileges() to verify that setgid()
and setuid() actually changed the effective IDs. Also verify that
setuid(0) fails after dropping privileges, confirming root cannot be
re-acquired. This is a defense-in-depth hardening measure per CWE-250
and CERT POS37-C. All added syscalls (geteuid, getegid, setuid) are
async-signal-safe, so they are safe in the pre_exec context.

Co-authored-by: John Myers <johntmyers@users.noreply.github.com>

2026-03-05 14:27:48 -08:00

..

navigator-bootstrap

feat(cli): fall back to last-used sandbox when name is omitted (#70)

2026-03-05 01:09:47 -08:00

navigator-cli

feat(cli): fall back to last-used sandbox when name is omitted (#70)

2026-03-05 01:09:47 -08:00

navigator-core

feat(tui): add port forwarding support to Gator (#81)

2026-03-03 17:31:44 -08:00

navigator-policy

feat(sandbox): support policy discovery and restrictive defaults on sandbox containers (#84)

2026-03-04 17:17:22 -08:00

navigator-providers

chore: rename Navigator to NemoClaw across user facing contracts (#73)

2026-03-03 11:41:19 -08:00

navigator-router

chore: rename Navigator to NemoClaw across user facing contracts (#73)

2026-03-03 11:41:19 -08:00

navigator-sandbox

fix(sandbox): verify effective UID/GID after privilege drop (#132)

2026-03-05 14:27:48 -08:00

navigator-server

fix(security): harden sandbox SSH with mandatory HMAC secret, NetworkPolicy, and nonce replay detection (#127)

2026-03-05 12:21:18 -08:00

navigator-tui

feat(cli): add --from flag to sandbox create for unified image sources (#89)

2026-03-04 21:15:13 -08:00