fix(security): drop cap_fowner and tighten sandbox policy - #1796

Closed

wbrom42 wants to merge 7 commits into

NVIDIA:mainfrom

Commits on Apr 12, 2026

fix(security): drop cap_fowner from sandbox bounding set (#797)

wbrom42
and
claude
committed
f92689e
fix(security): remove unused endpoints from base sandbox policy

wbrom42
and
claude
committed
2552f8a
chore: bump openclaw dependency to ^2026.4.9

wbrom42
and
claude
committed
472c706
docs: add security notes for upstream openclaw vuln tracking

wbrom42
and
claude
committed
2873218
fix(security): harden /tmp log init against symlink hijacking

wbrom42
and
claude
committed
9d0026e
docs: fix markdown structure and casing in SECURITY_NOTES

wbrom42
and
claude
committed
37fbc9d

Commits on Apr 17, 2026

merge(pr): resolve #1796 against origin/main
cv
committed
cd1589a