Raven Scott
41526508df
- HRPC: bare_os.search_local, route table/schema updates; ctx API 1.52.0 - VFS: optional path-capability enforcement; pathcap-verify coreutil - Replication/boot: warm-cache adaptive metrics, boot budget NDJSON v2 - Identity: savevault pre-snapshot host hint - POSIX: profile 1.0.16, socket connect timeout env, Wasm ctx API peek import - Security/ops: peer admission test, personal-drive path policy verifier in pretest - P2P UX: pkg-swarm-index; multisig rc.proposals/enabled gate + audit rows - Docs/scripts: README, handbook, env appendix, developer-guide, ctx helper sync - Examples: syscalls.example ctx version; seeder kernel rsync parity
12 lines
701 B
JSON
12 lines
701 B
JSON
{
|
|
"schema": 1,
|
|
"note": "Sign bareOsPathCapabilityPayloadCanonicalUtf8(payload) with Ed25519; set pubkeyHex (64 hex) and signatureHex (128 hex). Inner payload fields: prefix (absolute path prefix), ops (include read or all), optional expMs (epoch ms). Store on a file as xattr user.bareos.cap_v1 = base64(JSON.stringify(this object)) via /bin/xattr -w. Enable enforcement: BARE_OS_PATH_CAPABILITY_ENFORCE_READ=1 and BARE_OS_PATH_CAPABILITY_PREFIX=/home/",
|
|
"pubkeyHex": "REPLACE_WITH_SIGNER_PUBLIC_KEY_64_HEX_CHARS",
|
|
"signatureHex": "REPLACE_WITH_SIGNATURE_OVER_CANONICAL_PAYLOAD_128_HEX_CHARS",
|
|
"payload": {
|
|
"expMs": 1893456000000,
|
|
"ops": ["read"],
|
|
"prefix": "/home/guest/"
|
|
}
|
|
}
|