kuhyx/utils
1
0
Fork 0
mirror of https://github.com/kuhyx/utils.git synced 2026-11-10 19:07:17 +01:00
Code Issues Actions 14 Packages Projects Releases Wiki Activity

vmbox: close the last open item -- reset clears chattr +i
Some checks are pending
file length / file-length (push) Waiting to run
Details
palette drift / palette (push) Waiting to run
Details

Browse Source 
Item 5 was recorded as "PASS (partial, reset check pending)". Now verified:
`chattr +i /etc/hosts` in a sandbox gives `----i-----------------`; after
`vm reset` the same file reads `----------------------` and accepts a write.

Worth having measured rather than assumed. Immutability is exactly what makes
the hosts guard hard to undo on a real machine -- `rm` fails EPERM -- so
"reset discards it wholesale" is the strongest form of the reset guarantee and
the one most worth being sure of.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014wfxvsYxKM5xDXoDbkKi5u
This commit is contained in:
Krzysztof Rudnicki 2026-08-23 15:29:14 +02:00
parent a597104cf2
commit 6fd3b44e8c
1 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
vmbox/SESSION_RESULTS.md
View File

@ -38,9 +38,16 @@ sh aborts the shell even with `|| true` (special-builtin rule).
never installs guard-lib first, so on a fresh machine the core "Midnight
shutdown timer" module always fails.
## Item 5: hosts guard immutability — PASS (partial, reset check pending)
## Item 5: hosts guard immutability — PASS (complete)
lsattr /etc/hosts in the guest: ----ia---------------- (189366 entries).
The immutable flag really lands. `vm reset` clearing it still to verify.
The immutable flag really lands.
`vm reset` clearing it: VERIFIED 2026-08-22 (was left pending). Set
`chattr +i /etc/hosts` in a sandbox -> `----i-----------------`; after
`vm reset` the same file reads `----------------------` AND accepts a write
(`echo test >> /etc/hosts` succeeds). This is the strongest form of the reset
guarantee: immutability is precisely what makes these scripts hard to undo on
a real machine, and the overlay discards it wholesale.
## Item 4: boot_recovery/install.sh — PASS (highest-value item)
Installer exits 0; installs boot-repair + both pacman hooks.