harald
07afe34ad4
fix(mount): Z-01 — zeroize decoy password in memory
2026-09-19 09:46:45 +02:00
harald
bb86447039
fix(upgrade): U-03 — configure secondary backup release public key
2026-09-19 09:45:35 +02:00
harald
8dd54494b0
fix(upgrade): U-02 — validate version in minisign trusted comment against release tag
2026-09-19 09:43:39 +02:00
harald
78a9c233f8
fix(upgrade): U-01 — enforce pre-hashed minisign verification
2026-09-19 09:41:29 +02:00
harald
c7c0ed85f5
fix(sync): S-09 — pull overwrite protection and conflict safety
2026-09-19 09:40:00 +02:00
harald
92db21d47e
fix(sync): S-08 — document and refine glob matching in sync engine
2026-09-19 09:33:57 +02:00
harald
15adf79f48
fix(sync): S-07 — skip invalid windows filenames with files_skipped_invalid counter
2026-09-19 09:31:25 +02:00
harald
1ba67cc9e2
fix(storage): V-09 — ensure truncate chunks after shreds data blocks before deletion
2026-09-19 09:24:30 +02:00
harald
708da24d91
fix(vfs): V-08 — disallow tab control character in validate path safety
2026-09-19 09:22:46 +02:00
harald
730393423b
fix(vfs): V-07 — rfc-4918 destination overwrite semantics and directory conflict check in copy
2026-09-19 09:21:16 +02:00
harald
e300a764c9
fix(vfs): V-06 — sparse writes zero-fill gaps between previous end of file and seek offset
2026-09-19 09:19:56 +02:00
harald
17ac4f9358
fix(vfs): V-05 — log flush failure as error in sanctum file drop and ensure flush on close
2026-09-19 09:17:49 +02:00
harald
a2c16eda72
test(crypto): M-05 — verify schema equality between standard and hidden vault containers
2026-09-19 09:15:56 +02:00
harald
e496c418c5
doc(security): M-04 — document session token threat model in userland context
2026-09-19 09:15:05 +02:00
harald
2af14eef36
fix(mount): M-03 — output webdav credentials and manual mount instructions for linux
2026-09-19 09:14:18 +02:00
harald
ad9148d867
fix(build): M-02 — enable overflow checks in release profile
2026-09-19 09:12:30 +02:00
harald
a502845662
fix(crypto): M-01 — increase argon2id default parameters to 256 mib and 4 iterations
2026-09-19 09:12:04 +02:00
harald
52859623c2
fix(vfs): V-03 — raii memory lock guard prevents premature memory unlock on fs clone
2026-09-19 09:10:35 +02:00
harald
f9733dfc73
fix(storage): S-06 — container advisory lock prevents parallel mount and concurrent writes
2026-09-19 09:05:12 +02:00
harald
9634beb744
fix(sync): S-05 — delete and shred all chunks when truncating to 0 bytes
2026-09-19 08:59:00 +02:00
harald
f557a9ddfa
fix(sync): S-04 — eliminate TOCTOU by recording actual bytes written
2026-09-19 08:57:34 +02:00
harald
888c86ca5e
fix(sync): S-03 — symlink detection and cycle protection
2026-09-19 08:56:43 +02:00
harald
7b0f061221
fix(sync): S-02 — platform-independent path construction avoids path traversal
2026-09-19 01:01:09 +02:00
harald
bdddd812ac
fix(crypto): K-03 — emergency card persistence warning and rekey command
2026-09-19 00:58:39 +02:00
harald
36a4094336
fix(crypto): K-02 — format v3 chunk replay protection with generation aad
2026-09-19 00:52:13 +02:00
harald
ad531d8393
fix(crypto): K-01 — format v3 canonical metadata authentication
2026-09-19 00:26:27 +02:00
harald
151fdba09d
fix(vfs): V-01 — copy dispatches to CarrierFs in carrier mode
2026-09-19 00:16:04 +02:00
harald
533764487a
fix(vfs): V-02 — missing chunk within expected file size causes error instead of silent truncation
2026-09-19 00:13:43 +02:00
harald
374150e5b3
fix(sync): S-01 — excluded paths no longer deleted by --delete
2026-09-19 00:12:14 +02:00
harald
fba7f305e3
release: v0.7.2 — Security Audit Remediation (SA-01 bis SA-07)
...
Sanctum Release / Build & Test (Windows x86_64) (push) Waiting to run
Sanctum Release / Sign & Release (push) Blocked by required conditions
- SA-01: Container-DoS / KDF-Amplification Schutz mit Pre-KDF Validierung, max 2 Slots (nur 0 und 1), Slot 0 Pflicht und strikten BLOB-Laengen
- SA-02: Release-Signierung in CI entkoppelt (getrennte build und sign-and-release Jobs, Secret-Isolation)
- SA-03: Pinned Download-Integritaet fuer minisign.exe in CI via SHA-256
- SA-04: Immutable Action-Pinning (@sha) und Toolchain-Pinning (1.85.0) in CI
- SA-05: Session-Token vollstaendig aus URIs verbannt (403 Forbidden bei Vorkommen im Pfad/Query)
- SA-06: Constant-Time Token- und Auth-Vergleiche via subtle::ConstantTimeEq
- SA-07: Dokumentations-Klarstellung bzgl. logischem Shredding vs. physischer SSD/FTL/CoW-Persistenz
2026-09-18 23:40:35 +02:00
harald
1cdb30147b
release: v0.7.1 — Security-Patch (R-01 bis R-06)
...
Sanctum Release / Build & Release (Windows x86_64) (push) Waiting to run
- R-01: Bereinigung verbliebener Restbehauptungen in Doku und Code (LEGAL.md, README.md, QUICKSTART.md, main.rs, crypto/storage/recovery/verify.rs)
- R-02: Lückenloser Carrier-Schutz in SanctumFs::copy (Quelle & Ziel) und sync (Pull-Skip & Push-Schutz)
- R-03: Shared Dateinamen-Validierung (validate_node_name) in pathutil.rs, durchgesetzt in storage.rs und vfs.rs
- R-04: Fail-closed Release-Packaging & obligatorische Minisign-Signatur in CI (.gitea/workflows/release.yaml) und Scripts
- R-05: Session-Token Beseitigung im argv: In-Process Win32 WNetAddConnection2W/WNetCancelConnection2W, kein gio argv-Token, Multi-Auth HTTP Middleware (Basic Auth, X-Sanctum-Token, Path-Fallback) mit 401 WWW-Authenticate
- R-06: Sofortiges Löschen von SANCTUM_RECOVERY_KEY aus der Prozessumgebung
2026-09-18 19:49:38 +02:00
harald
436790abf0
feat(security): release v0.7.0 with comprehensive security hardening (S-01 to S-11)
Sanctum Release / Build & Release (Windows x86_64) (push) Waiting to run
2026-09-18 19:12:43 +02:00
harald
80a3bd1911
docs: update README.md with sanctum sync and in-place upgrade documentation
2026-09-16 13:46:35 +02:00
harald
2da1ea55a9
chore(release): update scoop and winget manifests for v0.6.0
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-16 12:40:37 +02:00
harald
2e4cf1cef0
feat(upgrade): implement in-place self-upgrade command and bump version to v0.6.0
2026-09-16 12:33:57 +02:00
harald
1048253497
chore(release): update scoop and winget manifests for v0.5.0
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-16 10:44:18 +02:00
harald
aa65d96434
feat(sync): add rsync-like sync command with dry-run and bump version to v0.5.0
2026-09-16 10:40:38 +02:00
harald
3f3f8f2730
chore(packages): update scoop and winget manifests to v0.4.1
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-14 14:11:51 +02:00
harald
650cfc7cd4
chore(release): bump version to v0.4.1
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-14 14:02:02 +02:00
harald
9d1a4d3ad7
build: preserve dist directory and merge SHA256 sums in package-release.ps1
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-14 13:36:59 +02:00
harald
aa25719c0d
fix(linux): prevent premature unmount caused by closed channel triggers in select!
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-14 13:27:10 +02:00
harald
34378998c4
feat(linux): add --mount-point CLI option and platform-aware mount messages
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-12 14:36:43 +02:00
harald
4ef0c414fa
feat(linux): add static musl x86_64 build, packaging, and Freedesktop integration
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-10 17:45:04 +02:00
harald
1f3afb1e52
fix(scripts): correct URL variable interpolation and add error check in publish script
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-10 17:05:15 +02:00
harald
5f2040f8bf
chore(release): bump version to 0.4.0 and update manifests
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-10 17:02:05 +02:00
harald
da2ddbd6ab
feat(distribution): add Scoop/Winget manifests, INSTALL.md, and Unix mount integration
2026-09-10 16:51:24 +02:00
harald
46f976b353
feat(cross-platform): add QUICKSTART.md, live crash test, and platform abstraction module
2026-09-10 16:31:57 +02:00
harald
6cb48f55d9
docs(compliance): add LEGAL.md, THIRD_PARTY_LICENSES.md, and update packaging
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-10 15:14:51 +02:00
harald
7ed0f51fb1
chore(release): bump version to 0.3.1 and update release notes
Sanctum Release / Build & Release (Windows x86_64) (push) Canceled after 0s
2026-09-10 14:08:48 +02:00
harald
dae0b3b7c3
feat(resilience): implement CHAOS-01 to CHAOS-03 crash consistency and input guards
...
- CHAOS-01: write chunk and update node size atomically via write_chunk_and_update_size in a single SQLite transaction
- CHAOS-02: reject null-bytes and ASCII control characters in VFS paths and node names via validate_path_safety
- CHAOS-03: invalidate in-memory chunk cache on I/O and disk-full errors to prevent drop failure cascades
2026-09-10 13:58:39 +02:00
harald