libstore: Enforce Mach-O code-signature validity when bytes enter the store - #4

Closed

ak2k wants to merge 3 commits into

darwin-signature-guard

Commits on Jul 4, 2026

libstore: Refuse store path hash rewrites that break Mach-O code signatures
ak2k
committed
517ec08
libstore: Repair broken Mach-O signatures via a privilege-dropped hook
ak2k
committed
02183f4
libstore: Verify and repair Mach-O signatures at substitution time and at rest
ak2k
committed
21119ac