l0ng-ai 8f72b79ff2 fix(daemon/transport): tighten Unix socket perms now it carries SSH secrets ...

The daemon socket now conveys NativeSshSpec cleartext secrets, but the socket
file was left at umask-default perms, so a co-local user could connect. On Unix,
chmod the socket file to 0600 (connecting requires write permission on the node,
so this is the access boundary) and chmod the config dir to 0700 — but only when
the socket lives in the config dir tty7 owns, never the overlong-path fallback
under a shared $XDG_RUNTIME_DIR / temp dir. Best-effort: log at warn and continue
on failure. Windows loopback+token path is untouched (it already authenticates).

2026-07-14 02:52:25 +08:00

..

core

feat(ssh): UX integration — native connect, palette entry, profile editor, session UX (WS6)

2026-07-14 02:15:04 +08:00

daemon

fix(daemon/transport): tighten Unix socket perms now it carries SSH secrets

2026-07-14 02:52:25 +08:00

terminal

feat(ssh): UX integration — native connect, palette entry, profile editor, session UX (WS6)

2026-07-14 02:15:04 +08:00

ui

feat(ssh): consolidate paths — russh default, freeze system-ssh compat (WS7)

2026-07-14 02:29:35 +08:00

main.rs

feat(settings): add bell, notify-threshold, mouse-reporting, and session-restore controls (#68)

2026-07-13 20:06:53 +08:00