kuhyx/testsAndMisc
1
0
Fork 0
mirror of https://github.com/kuhyx/testsAndMisc.git synced 2026-11-10 19:07:04 +01:00
Code Issues Actions 6 Packages Projects Releases Wiki Activity

Prettier-format INSTALLER_FIX_TASK.md
Some checks are pending
Pre-commit checks / pre-commit (push) Waiting to run
Details
Python tests / test (push) Waiting to run
Details
Shell tests / shell-tests (push) Waiting to run
Details
Shell tests / arch-tests (push) Waiting to run
Details

Browse Source 
It was untracked until this rename, so the pre-push prettier hook had never
seen it. Table separators and one blockquote marker; no prose changes.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PJrqKERAo5QUeEHWS5Asgp
This commit is contained in:
Krzysztof Rudnicki 2026-08-23 20:14:00 +02:00
parent 9543432ece
commit fd967e37e6
1 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
INSTALLER_FIX_TASK.md
View File

@ -17,12 +17,12 @@ correct on 2026-08-22; the repo moves.
The sandbox progression, measured with the repo's own hardening checks:
| State | Result |
|---|---|
| Bare guest, nothing installed | 0 passed / 17 skipped |
| After `install_core_system.sh --all` | 10 passed / 14 skipped |
| After manually installing guard-lib + the shutdown timer | 14 passed / 10 skipped |
| After manually running the hosts migration | **18 passed, 6 skipped, 0 failed** |
| State | Result |
| -------------------------------------------------------- | ---------------------------------- |
| Bare guest, nothing installed | 0 passed / 17 skipped |
| After `install_core_system.sh --all` | 10 passed / 14 skipped |
| After manually installing guard-lib + the shutdown timer | 14 passed / 10 skipped |
| After manually running the hosts migration | **18 passed, 6 skipped, 0 failed** |
The remaining 6 skips are legitimately screen_locker's. The gap between row 2
and row 4 is entirely defects 2 and 3 below: everything needed to reach a green
@ -64,7 +64,7 @@ claims otherwise:
> Enforcement does not depend on these sources being immutable: /etc/hosts
> itself is chattr +i, guard-lib's "hosts" file-guard instance (`guardctl
> file-guard status hosts`) watches and re-enforces it against its canonical
file-guard status hosts`) watches and re-enforces it against its canonical
> snapshot, and the same instance's bind mount pins it.
That is only true after running