Repository navigation

Refuse a LiteLLM disk-cache directory another account could write (GHSA-w8v5-vhqr-4h9v) - #226

Merged

MaxGhenis merged 14 commits into

mainfrom

cache-dir-ownership-guard

Oct 25, 2026

Merged

Refuse a LiteLLM disk-cache directory another account could write (GHSA-w8v5-vhqr-4h9v)#226
MaxGhenis merged 14 commits into
mainfrom
cache-dir-ownership-guard

Commits on Oct 14, 2026
- Refuse a LiteLLM disk-cache directory another account could write
  
  MaxGhenis
  and
  claude
  committed
  aed5e6f
- Check the cache's contents, tighten root-owned parents, separate plain errors
  
  MaxGhenis
  and
  claude
  committed
  9c7b52d
Commits on Oct 25, 2026
- Answer review r2: check parents from the root down, ACLs and the umask
  
  MaxGhenis
  and
  claude
  committed
  cd651d2
- Merge remote-tracking branch 'origin/main' into cache-dir-ownership-guard
  MaxGhenis
  committed
  f932408
- Fail rather than skip the Linux ACL tests on GitHub Actions
  
  MaxGhenis
  and
  claude
  committed
  7b76051
- Answer cache guard review r3: grpid groups, NFSv4 ACLs, umask lock
  
  MaxGhenis
  and
  claude
  committed
  37b5c1b
- Refuse AFS caches and NFSv4 entries naming the user's uid (review r4)
  
  MaxGhenis
  and
  claude
  committed
  74db0e0
- Merge origin/main (#225, #228) into cache-dir-ownership-guard
  
  MaxGhenis
  and
  claude
  committed
  da03bf7
- Identify AFS by fstatfs on every entry, not mountinfo or afs.* probes (review r5)
  
  MaxGhenis
  and
  claude
  committed
  477725c
- Merge remote-tracking branch 'origin/main' into cache-dir-ownership-guard
  MaxGhenis
  committed
  451fc84
- Merge remote-tracking branch 'origin/main' into cache-dir-ownership-guard
  MaxGhenis
  committed
  42122a8
- Refuse SMB and Coda by filesystem type; prefer fstatfs64; name failed entries (review r6)
  
  MaxGhenis
  and
  claude
  committed
  2e6bc68
- Say what the sources show about SMB's empty probe and f_type; check each descriptor's mount (review r7)
  
  MaxGhenis
  and
  claude
  committed
  098a983
- Cite fs/statfs.c for what fstatfs names (review r8 nit 1)
  
  MaxGhenis
  and
  claude
  committed
  b3c5f0e

Commits

Commits on Oct 14, 2026

Commits on Oct 25, 2026