Kaoru0822 26356dc34a fix(process): record withheld unrelated Linux processes as unverified (#6220) ...

* fix(process): record withheld unrelated Linux processes as unverified

The token sweep after an owned command (for example the Ghidra Java probe
run by setup and doctor) failed cleanup when an unrelated same-UID process
started during the sweep and Linux denied its /proc/<pid>/environ. Setgid or
setuid programs (mismatched real/saved IDs) and non-dumpable processes are
withheld by the kernel exactly like another account's processes, which were
already recorded as unverified.

Derive the kernel restriction from the same stat-bracketed procfs read that
already supplies the effective UID: all Uid/Gid IDs from status, and the
root ownership procfs reports for a non-dumpable process's environ. Keep that
fact through exit settlement. Related candidates still fail closed.

Fixes #6204

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* test(process): define caller credentials on hosts without geteuid

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-21 21:18:47 -07:00

..

capture

fix(javascript): preserve runtime path bytes and Electron ownership (#4941)

2026-10-20 17:25:19 +08:00

AbortablePromise.ts

fix(apktool): resolve Windows PATH launchers before invocation (#2802)

2026-10-13 22:00:47 +08:00

ArtifactAnalysisResources.test.ts

fix(process): report the effective regex heap and uncertain signal retry (#6099)

2026-10-22 07:40:14 +08:00

ArtifactAnalysisResources.ts

fix(process): report the effective regex heap and uncertain signal retry (#6099)

2026-10-22 07:40:14 +08:00

BoundedFileBytes.ts

fix(files): preserve physical read failures across late cancellation

2026-10-21 06:14:03 +08:00

boundedUtf8Text.ts

fix(providers): retain native parsing and compiler failure diagnostics

2026-10-12 08:59:14 +08:00

CurrentEntrypointPath.ts

fix(setup): preserve launcher identity and uncertainty

2026-10-18 06:18:34 +08:00

DarwinProcessRunTokenReader.finalization.test.ts

fix(process): retain native ownership evidence through cleanup

2026-10-19 20:04:00 +08:00

DarwinProcessRunTokenReader.timeout.test.ts

fix(process): name the Swift compile deadline (#6071)

2026-10-21 23:46:29 +08:00

DarwinProcessRunTokenReader.ts

fix(process): name the Swift compile deadline (#6071)

2026-10-21 23:46:29 +08:00

DecodedNdjsonLineBuffer.test.ts

refactor(process): share decoded NDJSON framing

2026-10-22 08:35:20 +08:00

DecodedNdjsonLineBuffer.ts

refactor(process): share decoded NDJSON framing

2026-10-22 08:35:20 +08:00

DetachedPgpSignature.test.ts

fix(cancellation): preserve caller abort reason in cancellation errors (#6144)

2026-10-22 04:11:15 +08:00

DetachedPgpSignature.ts

fix(cancellation): preserve caller abort reason in cancellation errors (#6144)

2026-10-22 04:11:15 +08:00

ExecFileBoundedOutput.test.ts

fix(process): preserve cleanup ownership and normalize captures once

2026-10-14 08:19:07 +08:00

ExecFileBoundedOutput.ts

fix(process): preserve cleanup ownership and normalize captures once

2026-10-14 08:19:07 +08:00

ExecFileOutput.test.ts

fix(windows): retain native handles when close is unconfirmed (#5772)

2026-10-21 12:56:36 +08:00

ExecFileOutput.ts

fix(windows): retain native handles when close is unconfirmed (#5772)

2026-10-21 12:56:36 +08:00

HopperLease.ts

fix(hopper): preserve streamed Unicode lease owner identities

2026-10-22 09:11:44 +08:00

JavaScriptWorkerMemoryLimit.test.ts

fix(bun): report the real runtime and enforce worker memory budgets on Windows (#1730)

2026-10-11 19:20:00 +08:00

JavaScriptWorkerMemoryLimit.ts

fix(bun): report the real runtime and enforce worker memory budgets on Windows (#1730)

2026-10-11 19:20:00 +08:00

LinuxProcessStat.test.ts

fix(process): settle native exit and repair ownership verification (#5249)

2026-10-20 02:01:00 +08:00

LinuxProcessStat.ts

fix(process): settle native exit and repair ownership verification (#5249)

2026-10-20 02:01:00 +08:00

LinuxProcessStatus.test.ts

fix(process): record withheld unrelated Linux processes as unverified (#6220)

2026-10-21 21:18:47 -07:00

LinuxProcessStatus.ts

fix(process): record withheld unrelated Linux processes as unverified (#6220)

2026-10-21 21:18:47 -07:00

LinuxResourceLimits.test.ts

fix(process): retain kernel limit descriptor cleanup ownership

2026-10-18 08:29:57 +08:00

LinuxResourceLimits.ts

fix(process): retain kernel limit descriptor cleanup ownership

2026-10-18 08:29:57 +08:00

MacCodeSignature.ts

fix(hopper): recover provenance-verified Spotlight exits

2026-10-14 06:19:47 +08:00

OwnedCommand.ts

fix(process): preserve observed command failures and native ownership

2026-10-20 17:17:14 +08:00

OwnedCommandPreparation.test.ts

fix(ghidra): prepare ownership before Java probe deadline

2026-10-17 22:06:16 +08:00

ownedDebuggerSession.ts

fix(process): name the Swift compile deadline (#6071)

2026-10-21 23:46:29 +08:00

OwnedWorkerRuntime.test.ts

fix(browser): isolate web bundle analysis with bounded partial results

2026-10-19 13:22:54 +08:00

OwnedWorkerRuntime.ts

fix(javascript): preserve observed worker failure ordering

2026-10-20 18:38:00 +08:00

PendingOperations.ts

refactor(tools): remove artificial analysis ceilings

2026-09-29 16:29:23 +08:00

PrivateRuntimeRoot.ts

fix(windows): preserve transient runtime admission failures (#2467)

2026-10-13 11:42:54 +08:00

PrivateRuntimeRootUnavailableError.ts

fix(windows): preserve transient runtime admission failures (#2467)

2026-10-13 11:42:54 +08:00

ProcessCommandIdentity.ts

fix(ci): repair cross-platform package verification

2026-07-24 15:22:24 +00:00

ProcessLifecycle.ts

fix(process): retain child scope and bound native exit waits (#5280)

2026-10-19 19:27:43 +00:00

ProcessOutputTokenScanner.test.ts

fix(ghidra): own operation-scoped JVM failure evidence

2026-10-19 17:15:32 +08:00

ProcessOutputTokenScanner.ts

fix(ghidra): own operation-scoped JVM failure evidence

2026-10-19 17:15:32 +08:00

ProcessOwnership.baselineAbsence.test.ts

fix(javascript): preserve runtime path bytes and Electron ownership (#4941)

2026-10-20 17:25:19 +08:00

ProcessOwnership.exiting.test.ts

fix(process): settle native exit and repair ownership verification (#5249)

2026-10-20 02:01:00 +08:00

ProcessOwnership.exitScope.test.ts

fix(process): retain child scope and bound native exit waits (#5280)

2026-10-19 19:27:43 +00:00

ProcessOwnership.finalSweep.test.ts

fix(process): settle native exit and repair ownership verification (#5249)

2026-10-20 02:01:00 +08:00

ProcessOwnership.fixture.ts

test(process): share lineage fixtures to restore the duplication gate

2026-10-21 11:56:36 +08:00

ProcessOwnership.identity.test.ts

fix(process): record withheld unrelated Linux processes as unverified (#6220)

2026-10-21 21:18:47 -07:00

ProcessOwnership.nativeExit.test.ts

fix(process): retain native ownership evidence through cleanup

2026-10-19 20:04:00 +08:00

ProcessOwnership.observation.test.ts

fix(process): retain native ownership evidence through cleanup

2026-10-19 20:04:00 +08:00

ProcessOwnership.part2.test.ts

test(process): share lineage fixtures to restore the duplication gate

2026-10-21 11:56:36 +08:00

ProcessOwnership.part3.test.ts

test(process): share lineage fixtures to restore the duplication gate

2026-10-21 11:56:36 +08:00

ProcessOwnership.procIdentity.test.ts

fix(process): record withheld unrelated Linux processes as unverified (#6220)

2026-10-21 21:18:47 -07:00

ProcessOwnership.runId.test.ts

fix(process): cancel run-token reads during sampling

2026-10-12 04:33:42 +08:00

ProcessOwnership.sweepExit.test.ts

fix(process): reconcile native lifetime and selective Linux UID facts

2026-10-20 00:05:22 +08:00

ProcessOwnership.test.ts

fix(process): retain native ownership evidence through cleanup

2026-10-19 20:04:00 +08:00

ProcessOwnership.ts

fix(process): record withheld unrelated Linux processes as unverified (#6220)

2026-10-21 21:18:47 -07:00

ProcessOwnership.validation.test.ts

fix(process): name the Swift compile deadline (#6071)

2026-10-21 23:46:29 +08:00

ProcessOwnershipEvidence.ts

fix(process): retain child scope and bound native exit waits (#5280)

2026-10-19 19:27:43 +00:00

ProcessOwnershipFacts.test.ts

fix(process): retain native ownership evidence through cleanup

2026-10-19 20:04:00 +08:00

ProcessOwnershipIdentity.ts

fix: harden structured configuration comparisons (#467)

2026-08-09 11:58:01 +08:00

ProcessOwnershipObservation.ts

fix(process): record withheld unrelated Linux processes as unverified (#6220)

2026-10-21 21:18:47 -07:00

ProcessOwnershipProcessTree.ts

fix(process): settle launcher exit without dropping descendant lineage

2026-10-11 11:06:10 +08:00

ProcessRunTokenObservations.ts

perf(process): share batched token observation across ownership checks

2026-10-11 02:10:44 +08:00

ProcessStartIdentity.test.ts

fix(process): preserve cleanup ownership and normalize captures once

2026-10-14 08:19:07 +08:00

ProviderDeadline.test.ts

test(process): preserve terminal deadline expiry regression (#2055)

2026-10-14 03:29:34 +08:00

ProviderDeadline.ts

test(process): preserve terminal deadline expiry regression (#2055)

2026-10-14 03:29:34 +08:00

ProviderDiagnosticRedaction.ts

fix(providers): bound launcher diagnostics without losing byte counts

2026-10-11 02:50:06 +08:00

ProviderProcess.launcherExit.test.ts

fix(process): settle owned cleanup with the launcher's own exit proof (#6205)

2026-10-21 20:10:07 -07:00

ProviderProcess.ts

fix(process): settle owned cleanup with the launcher's own exit proof (#6205)

2026-10-21 20:10:07 -07:00

ProviderProcessOutput.test.ts

fix(workers): retain observed protocol failures across cancellation

2026-10-20 19:05:00 +08:00

ProviderRunLineage.ts

refactor(app): split Setup and ProcessOwnership modules (#628)

2026-10-06 05:00:32 +08:00

queuedInterrupts.ts

feat(cli): summarize managed members with durable Evidence paging (#5167)

2026-10-22 00:43:30 +00:00

RegexMatcher.test.ts

fix(process): report the effective regex heap and uncertain signal retry (#6099)

2026-10-22 07:40:14 +08:00

RegexMatcher.ts

fix(process): report the effective regex heap and uncertain signal retry (#6099)

2026-10-22 07:40:14 +08:00

SharedStartupAttempt.test.ts

fix(process): preserve owning operation cancellation

2026-10-17 04:21:21 +08:00

SharedStartupAttempt.ts

fix(process): preserve owning operation cancellation

2026-10-17 04:21:21 +08:00

snapshotEnvironment.test.ts

fix(setup): preserve Windows environment override identity (#4946)

2026-10-20 17:25:51 +08:00

snapshotEnvironment.ts

fix(setup): preserve Windows environment override identity (#4946)

2026-10-20 17:25:51 +08:00

WindowsAuthority.ts

fix(windows): explain missing native artifacts and verify output drain

2026-10-15 03:43:29 +08:00

WindowsBatchCommand.ts

fix(apktool): run Windows batch launchers through cmd.exe (#1777)

2026-10-11 17:16:48 +08:00

WorkerFrameSignal.ts

refactor(process): own worker frame wait lifecycle

2026-10-22 08:20:30 +08:00