openclaw/src/security
Dominic a8ad242f88
fix(security): properly test Windows ACL audit for config includes (#2403)
* fix(security): properly test Windows ACL audit for config includes

The test expected fs.config_include.perms_writable on Windows but
chmod 0o644 has no effect on Windows ACLs. Use icacls to grant
Everyone write access, which properly triggers the security check.

Also stubs execIcacls to return proper ACL output so the audit
can parse permissions without running actual icacls on the system.

Adds cleanup via try/finally to remove temp directory containing
world-writable test file.

Fixes checks-windows CI failure.

* test: isolate heartbeat runner tests from user workspace

* docs: update changelog for #2403

---------

Co-authored-by: Tyler Yust <TYTYYUST@YAHOO.COM>
2026-01-26 16:27:53 -08:00
..
audit-extra.ts fix: use Windows ACLs for security audit 2026-01-26 18:19:58 +00:00
audit-fs.ts fix: use Windows ACLs for security audit 2026-01-26 18:19:58 +00:00
audit.test.ts fix(security): properly test Windows ACL audit for config includes (#2403) 2026-01-26 16:27:53 -08:00
audit.ts feat(telegram): add edit message action (#2394) (thanks @marcelomar21) 2026-01-26 15:34:47 -08:00
external-content.test.ts fix(security): prevent prompt injection via external hooks (gmail, we… (#1827) 2026-01-26 13:34:04 +00:00
external-content.ts fix(security): prevent prompt injection via external hooks (gmail, we… (#1827) 2026-01-26 13:34:04 +00:00
fix.test.ts test: fix Windows security audit perms 2026-01-15 06:04:39 +00:00
fix.ts fix: use Windows ACLs for security audit 2026-01-26 18:19:58 +00:00
windows-acl.ts fix: use Windows ACLs for security audit 2026-01-26 18:19:58 +00:00