Fix OpenShellSpawner: send baseline Landlock filesystem policy for non-advisory spawns - #191

Merged

jameswnl merged 3 commits into

mainfrom

issue-189-landlock-filesystem-policy

Aug 25, 2026

Commits on Aug 25, 2026

Fix OpenShellSpawner: send baseline Landlock filesystem policy for non-advisory spawns

jameswnl
and
claude
committed
d767896
Reject filesystem-root extra_readable_paths; strengthen e2e assertion

jameswnl
and
claude
committed
d4407e0
Close /. and /././ bypass of the filesystem-root check

jameswnl
and
claude
committed
e30aa8a