[GH-ISSUE #328] Real-Windows verifier for private DACL access control and cleanup #177

New issue

Open

opened 2026-10-15 18:22:04 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-15 18:22:04 +00:00

Owner

Originally created by @morluto on GitHub (Jul 20, 2026).
Original GitHub issue: https://github.com/morluto/rea/issues/328

Run real non-admin Windows tests proving current-user/SYSTEM access is allowed, unrelated local users are denied, and runtime-root cleanup is idempotent and does not follow links outside the owned tree.

Acceptance:

Unrelated same-box user cannot read session descriptors, tokens, snapshots, logs, or project data.
Cleanup succeeds and leaves no orphaned runtime artifacts.
Replacing parent components does not broaden access to the runtime tree.

Part of #290.

Originally created by @morluto on GitHub (Jul 20, 2026). Original GitHub issue: https://github.com/morluto/rea/issues/328 Run real non-admin Windows tests proving current-user/SYSTEM access is allowed, unrelated local users are denied, and runtime-root cleanup is idempotent and does not follow links outside the owned tree. Acceptance: - Unrelated same-box user cannot read session descriptors, tokens, snapshots, logs, or project data. - Cleanup succeeds and leaves no orphaned runtime artifacts. - Replacing parent components does not broaden access to the runtime tree. Part of #290.

bsakaguchi added the

area: runtime

P1: high

enhancement

labels

2026-10-15 18:22:04 +00:00

bsakaguchi referenced this issue

2026-10-16 21:11:48 +00:00

[PR #203] [MERGED] fix: resolve triaged correctness issues #1854

bsakaguchi added

enhancement

and removed