linux: skip write-deny binds already covered by a read-only denied directory - #502

Merged

dylan-conway merged 5 commits into

anthropics:mainfrom

ronleizrowice-ant:fix/linux-covered-write-deny-binds

Sep 3, 2026

Commits on Aug 29, 2026

fix(linux): skip write-deny binds already covered by a read-only denied directory
ronleizrowice-ant
committed
2ba7f65
refactor(linux): decide both write-deny skips with one strict predicate
ronleizrowice-ant
committed
355f0d1
fix(linux): make the covering-directory vetoes and re-application root-aware
ronleizrowice-ant
committed
00e00c4
test(linux): pin veto (i) without a read policy and no tmpfs re-application over a same-directory bind
ronleizrowice-ant
committed
12a0790

Commits on Sep 2, 2026

refactor(linux): name the strict containment test the vetoes share
ronleizrowice-ant
committed
6ea1501