Skip to content

security hardening - #7

Merged
VoltKraft merged 2 commits into
mainfrom
WIP
Oct 31, 2025
Merged

VoltKraft merged 2 commits into
mainfrom
WIP

Conversation

@VoltKraft

Copy link
Copy Markdown
Owner

No description provided.

Resolve absolute paths for proxmox-backup-manager/proxmox-backup-debug and constrain PATH
Add stable locale for subprocesses and enforce timeouts for manager/list/show and debug/inspect
Introduce safe run_cmd with env/timeout and better timeout error reporting
Validate datastore names via regex; reject invalid identifiers
Add resolve_search_path to prevent path traversal; ensure paths stay under datastore root
Bump version to 2.4.1 and align README version
Rationale: reduce supply-chain and injection risks, prevent path escapes, and improve robustness on PBS Linux hosts
Resolve absolute paths for proxmox-backup-manager/proxmox-backup-debug and constrain PATH
Add stable locale for subprocesses and enforce timeouts for manager/list/show and debug/inspect
Introduce safe run_cmd with env/timeout and better timeout error reporting
Validate datastore names via regex; reject invalid identifiers
Add resolve_search_path to prevent path traversal; ensure paths stay under datastore root
Bump version to 2.4.1 and align README version
Rationale: reduce supply-chain and injection risks, prevent path escapes, and improve robustness on PBS Linux hosts
@VoltKraft
VoltKraft merged commit 1b0713e into main Oct 31, 2025
3 checks passed
@VoltKraft
VoltKraft deleted the WIP branch October 31, 2025 22:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant