Harden network helpers and compat-dir mounts per security review

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
2026-10-24 00:45:27 +02:00
co-authored by Claude Sonnet 5
parent 4c4bb1a83a
commit 598a585eb8
53 changed files with 1151 additions and 80 deletions
+3 -3
View File
@@ -12,10 +12,10 @@ fail() { echo "docs: $*"; bad=$((bad+1)); }
while IFS= read -r f; do
f=${f#./}
printf '%s\n' "${DOCS[@]}" | grep -qxF "$f" || fail "$f is not in the DOCS list of scripts/check-docs.sh"
done < <(find . -name '*.md' -not -path './build/*' -not -path './.git/*' -not -path './prompt.md' -not -path './audit/*' -not -path './review.md')
done < <(find . -name '*.md' -not -path './build/*' -not -path './.git/*' -not -path './prompt.md' -not -path './audit/*' -not -path './review.md' -not -path './valgrind/*')
# prompt.md: the original task statement, not documentation.
# audit/*: a separate, self-contained doc set (one README per CVE check); audit/README.md is
# linked from the main docs but is not forced into their full cross-link mesh.
# audit/*, valgrind/*: separate, self-contained doc sets (one README per CVE check, one for the
# valgrind setup); linked from the main docs but not forced into their full cross-link mesh.
# review.md: a standalone external security review, not part of the maintained doc set.
for f in "${DOCS[@]}"; do