42d701e25f
docs: backfill CHANGELOG and SECURITY-HARDENING for review rounds
...
CHANGELOG [Unreleased]:
- Add Security section with review round 2 fixes (PAM zeroization,
initgroups, SignalBlocker scoping, UmaskGuard !Send/!Sync, targeted
newgrp hardening, atomic_write retry, crypt thread-safety docs,
centralized hardening, println panic fix, unwind table suppression)
- Update 0.1.0 test count from 460+ to 580+, fuzz targets from 4 to 6
SECURITY-HARDENING.md:
- Add 7 implemented items from review round 2
2026-04-22 10:27:46 +02:00
0a33f2186d
review: address 5 Copilot review comments
...
- Fix function name: sanitize_env() → sanitized_env() / harden_process()
- Fix SIGINT handler: was removed, not implemented
- Fix user enumeration: early permission check, not constant-time PAM
- Fix Rust module paths: shadow-core → shadow_core (crate vs module)
2026-04-03 15:27:58 +02:00
4259dc7cd0
docs: fix stale claims, add missing -p flag to usermod man page
...
- README: fix passwd flag count (17→16), add Landlock mention, add
Hardened goal, update usermod description with -p, fix past tense
- CONTRIBUTING: fix unsafe description to match actual workspace policy
- CHANGELOG: add [Unreleased] section for post-v0.1.0 changes
- OPENBSD-REFERENCE: move all implemented items to correct section
- SECURITY-HARDENING: mark all 21 items as implemented
- man/usermod: add -p/--password flag documentation
2026-04-03 15:16:41 +02:00
81d0e1776d
docs/fixes: man pages, benchmarks, BSD research, Copilot findings
...
Fixes #56 — 14 man pages in docs/man/ (markdown format).
Fixes #67 — 8 Copilot findings fixed:
- useradd: proper date validation (Feb 31 rejected)
- userdel/usermod: --root wired to SysRoot
- usermod: --expiredate validates input
- usermod: --login validates name + updates shadow/group
- userdel: -f separated from -r behavior
- useradd: home dir resolved through SysRoot
- skel: preserves directory permissions
Fixes #69 — benchmark script (benches/benchmark.sh)
Fixes #70 — FreeBSD/NetBSD reference (docs/FREEBSD-NETBSD-REFERENCE.md)
456 tests, zero clippy warnings.
2026-03-24 13:05:40 +01:00
89bc4b4e6b
docs: update OpenBSD reference with full audit findings (13 findings)
2026-03-23 16:38:50 +01:00
39ae9647e8
docs: add OpenBSD security reference and hardening roadmap
2026-03-23 16:15:55 +01:00
Pierre Warnier