bread/graphify-out
Breadway da889d6f6a
All checks were successful
dev release / build (push) Successful in 1m2s
fix(module_host): grant Landlock access to IPC socket path
Out-of-process modules timed out with "did not report ready within 45s"
because apply_sandbox never allowed the child to reach breadd's Unix
socket. Path-based AF_UNIX connect is mediated as filesystem access, so
without a rule for the socket (and its parent) UnixStream::connect failed
with EACCES and the hello handshake never completed.

Pass socket_path into apply_sandbox and add baseline ReadDir/ReadFile
rules for the socket directory and path, matching the existing module-
directory grant. Update unit-test call sites accordingly.
2026-08-05 10:01:58 +08:00
..
cache fix(module_host): grant Landlock access to IPC socket path 2026-08-05 10:01:58 +08:00
.graphify_labels.json fix(module_host): grant Landlock access to IPC socket path 2026-08-05 10:01:58 +08:00
.graphify_python can't be bothered writing a commit message 2026-08-03 09:37:15 +08:00
.graphify_root can't be bothered writing a commit message 2026-08-03 09:37:15 +08:00
cost.json fix(module_host): grant Landlock access to IPC socket path 2026-08-05 10:01:58 +08:00
graph.html fix(module_host): grant Landlock access to IPC socket path 2026-08-05 10:01:58 +08:00
graph.json fix(module_host): grant Landlock access to IPC socket path 2026-08-05 10:01:58 +08:00
GRAPH_REPORT.md fix(module_host): grant Landlock access to IPC socket path 2026-08-05 10:01:58 +08:00
manifest.json fix(module_host): grant Landlock access to IPC socket path 2026-08-05 10:01:58 +08:00