Miguel Jacq
1e9806d2dc
Promote uploaded zipapps into a private root-owned directory before verification and execution. Copy and hash through the same pinned file descriptor, reject unsafe file types and metadata, publish atomically, and ensure sudo executes only the verified root-owned copy. |
||
|---|---|---|
| .. | ||
| source | ||
| changelog | ||
| control | ||
| rules | ||