Keep keyring session payloads out of process arguments

2026-10-25 17:52:22 +01:00
parent 7aef4171af
commit 8d8474c349
5 changed files with 55 additions and 2 deletions
@@ -20,3 +20,8 @@ failures do not invalidate a successfully verified session.

 Run `node --test src/session-recovery.test.js` for response classification and
 retry-schedule coverage. This is not a substitute for native AppImage acceptance.
+
+Keyring writes use `keyctl padd` with the session supplied through standard input,
+never process arguments. Helper stdout/stderr are discarded so credential payloads
+cannot enter diagnostics. Native tests cover the argument boundary, stdin delivery,
+and helper failure handling without reading or modifying real keyring entries.