修复 AGC Windows ACL 提权与文件访问边界 #211

Merged
kdletters merged 7 commits from fix/windows-acl into master 2026-08-31 14:37:35 +08:00

7 Commits

Author SHA1 Message Date
kdletters 0aa82b79fd Merge branch 'master' into fix/windows-acl
Project CI / Repository checks (pull_request) Successful in 2m42s
Project CI / Frontend tests (pull_request) Successful in 4m21s
Project CI / Backend tests (pull_request) Successful in 6m38s
Project CI / Native shell tests (pull_request) Successful in 18m47s
2026-08-31 14:37:23 +08:00
suzmii d330cb78bc Merge branch 'master' into fix/windows-acl
Project CI / Repository checks (pull_request) Successful in 5m13s
Project CI / Backend tests (pull_request) Successful in 9m50s
Project CI / Frontend tests (pull_request) Successful in 12m3s
Project CI / Native shell tests (pull_request) Successful in 29m10s
2026-08-31 14:31:43 +08:00
suzmii 12c4447cd1 Merge remote-tracking branch 'origin/fix/windows-acl' into fix/windows-acl
Project CI / Repository checks (pull_request) Successful in 3m48s
Project CI / Frontend tests (pull_request) Successful in 4m25s
Project CI / Backend tests (pull_request) Successful in 7m19s
Project CI / Native shell tests (pull_request) Successful in 15m34s
2026-08-31 11:58:25 +08:00
suzmii 8624181eca 修复 Unix CI 符号链接断言
更新项目字体符号链接错误文案断言

同步自动工作区链接拒绝断言
2026-08-31 11:57:29 +08:00
suzmii 01ec370808 Merge branch 'master' into fix/windows-acl
Project CI / Frontend tests (pull_request) Successful in 3m51s
Project CI / Backend tests (pull_request) Successful in 7m8s
Project CI / Native shell tests (pull_request) Failing after 12m2s
Project CI / Repository checks (pull_request) Successful in 3m13s
2026-08-31 11:18:45 +08:00
suzmii 4651197458 Merge branch 'master' into fix/windows-acl
Project CI / Frontend tests (pull_request) Successful in 3m26s
Project CI / Repository checks (pull_request) Successful in 3m5s
Project CI / Backend tests (pull_request) Failing after 3m14s
Project CI / Native shell tests (pull_request) Failing after 7m36s
2026-08-31 10:52:14 +08:00
suzmii 78e4fbdfe4 修复 AGC Windows ACL 提权与文件访问边界
Project CI / Frontend tests (pull_request) Successful in 3m55s
Project CI / Backend tests (pull_request) Failing after 4m29s
Project CI / Native shell tests (pull_request) Failing after 5m56s
Project CI / Repository checks (pull_request) Successful in 3m21s
修复自定义 --config-dir 的 ACL 提权 scope 传递

增加 native picker 路径 provenance 与短期授权

拒绝 symlink、junction 和 Windows reparse point 递归

统一 metadata/read 前 ACL 准备并补强新建文件失败清理

修复 UAC 授权票据独占句柄导致的共享冲突

同步 AGC Windows ACL 技术方案与安全回归测试
2026-08-30 18:02:31 +08:00