fix(storage): S-06 — container advisory lock prevents parallel mount and concurrent writes

2026-09-19 09:05:12 +02:00
parent 9634beb744
commit f9733dfc73
7 changed files with 280 additions and 3 deletions
@@ -182,6 +182,9 @@ pub async fn mount_container(
        }
    };

+    // S-06: Advisory Lock setzen, um parallele Mounts und schreibende Sync-Läufe abzuwehren
+    let _advisory_lock = db.acquire_advisory_lock_guard(false)?;
+
    // 128-Bit Session-Token für Loopback-Schutz (CWE-306) & Anti-CSRF generieren
    let mut token_bytes = [0u8; 16];
    rand::RngCore::fill_bytes(&mut rand::rngs::OsRng, &mut token_bytes);