Run deferred macOS administrator credential and UID-quota tests

Abierto
  • ¿Algo no está bien?
#10 0 comentarios 0 reacciones 0 asignados Ver en GitHub

Nadie ha tomado este issue todavía.

Evaluación

Dificultad
4/5
Tiempo estimado
3-5 días
Aptitud para principiantes
25/100
Tipo de issue
Error
Claridad
Bien especificado
Estado de actividad
Activo
Stack tecnológico
c, rust
Área
operating-systems, testing

Línea de trabajo

Read issue #1 and inspect the prepared C control, reviewed plan, and evidence archives at tests/evidence/macos-nproc-accounting.zip and tests/evidence/macos-reserve-custody.zip. When administrator authentication is available, revalidate host and artifact hashes, then run the bounded sequential M=8 control with 6, 7, and 8 retained reserves. Record credential and limit readbacks, stage errors, fork and recovery outcomes; retain raw streams and receipts, verify reaping and cleanup, and update #1 with what the results establish.

Escrito por el modelo de indexación a partir del texto del issue.

Descripción

Related to #1.

The user has deferred macOS administrator-only tests for now. The reviewed invocation was refused with sudo: a password is required before the root controller or native primitive started. No privileged control result exists.

The corrected C control compiled on macOS 27.0.1 / build 26A434, ARM64, using the explicit macOS SDK. It requires the sole target GID and logs the failing credential step. The original incorrect zero-group-readback version was preserved and never executed as root.

Prepared identities:

  • Corrected source SHA-256: 4b72fcbf0f54d38120c2ec9878735e76c2d1b551fd79c458ac149d88653c527b.
  • Native binary SHA-256: 39e4c7ba2bf024189331e4431a8d86b4b115a78017f66a2588b7da26ce1a19a4.
  • Reviewed plan SHA-256: c826f08e070b6c9eed615574ceda9e74a8185aede630504a1d65742bf654cbde.

Validation to run when administrator authentication is available

  • Revalidate the host, tool/binary hashes and an unused numeric UID; refresh the reviewed plan if its temporary paths or inputs changed.
  • Run the bounded, sequential M=8 control with 6, 7 and 8 retained reserves. Record real/effective credentials, the exact group list, RLIMIT_NPROC readbacks, each credential-stage errno, fork outcomes and recovery after exact child reaps. Treat a negative result as evidence requiring a design response.
  • Retain every raw stream and interrupted/refused attempt. Verify exact child reaping, UID and process-group emptiness, and identity-checked artifact cleanup.
  • Publish the receipts and update #1 with what the observations actually establish.

The prepared envelope uses Windows 100s, Mac outer 65s, root controller 40s and a root-owned primitive group deadline of 25s, with internal work/cleanup limits of 14/15s. Recheck those bounds before execution. The control creates no account, changes no global limit and executes no workload.

This issue tracks the deferred administrator validation. It does not establish the backend's fork fence, custody after supervisor loss, watchdog behavior or the shared escape-test acceptance criteria in #1. Existing accounting and custody evidence remains under tests/evidence/macos-nproc-accounting.zip and tests/evidence/macos-reserve-custody.zip.

Keep administrator tests deferred under the user's current instruction; do not bypass authentication or change sudo policy.

Lenguaje dominante
Rust
Estrellas
0
Forks
0
Sin PR fusionados en 30 d

Preparar el entorno

Primeros pasos

  1. Lee el issue completo y luego la guía de contribución del proyecto.
  2. Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
  3. Haz un fork del repositorio y trabaja en una rama.
  4. Abre un pull request que haga referencia al número del issue.

Más de WikdSolvemProbler/process-tree-guard

Todos los issues de WikdSolvemProbler/process-tree-guard

Issues similares

Más issues de Rust

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.