Pierre Warnier 4ecf63ec1f security: AT_EXECFN validation + audit.yml (#154, #155) ...

#154: Reject setuid multicall invocations where argv[0] doesn't match
AT_EXECFN from the ELF auxiliary vector. Prevents an attacker from
spoofing argv[0] to route the multicall binary to a different tool
in setuid context. Only enforced when euid != uid.

#155: Add daily cargo-audit workflow matching uutils/coreutils pattern.
Also triggers on Cargo.toml/Cargo.lock changes.

Fixes #154. Fixes #155.

2026-04-22 18:13:36 +02:00

..

audit.yml

security: AT_EXECFN validation + audit.yml (#154, #155)

2026-04-22 18:13:36 +02:00

ci.yml

chore(deps): update actions/checkout action to v6

2026-04-22 13:36:46 +00:00