fix(subprocess): block /proc/environ env-blocklist bypass (#4427) - #19568

Closed

EthanGuo-coder wants to merge 4 commits into

NousResearch:mainfrom

EthanGuo-coder:fix/issue-4427

Commits on May 14, 2026

fix(subprocess): clear PR_SET_DUMPABLE to block /proc/environ leak

EthanGuo-coder
and
claude
committed
05469ee
test(subprocess): cover /proc/environ hardening for spawn sites

EthanGuo-coder
and
claude
committed
485c95b
fix(subprocess): close MCP stdio leak + harden ABI/state for #4427

EthanGuo-coder
and
claude
committed
4a8391a

Commits on May 18, 2026

fix(subprocess): cache prctl + drop import-time harden (review feedback)
EthanGuo-coder
committed
a713f9b