Chris LuandGitHub 29981f8d24 sftp: match permission paths on path-component boundaries (#10311) ...

* sftp: match permission paths on path-component boundaries

Permission checks compared paths with raw string prefixes, so a
permission entry for /tenants/alice also matched sibling paths such as
/tenants/alice-archive, letting a scoped user read and overwrite
another tenant's files. The home directory containment check had the
same flaw. Route both through pathWithin, which cleans the paths and
requires exact equality or a separator-delimited descendant.

* sftp: clean permission path into a local when ranking matches

2026-07-10 22:10:01 -07:00

..

benchmark/fuse_db

test: add FUSE database load/durability/perf benchmark (#9980)

2026-06-15 13:25:27 -07:00

data

volume: large_volume version has bug when using in memory index

2021-06-28 15:48:07 -07:00

erasure_coding

test(ec): deterministically populate disks before multi-disk EC balance check (#9611)

2026-05-21 09:39:55 -07:00

foundationdb

go 1.25

2026-03-09 23:10:27 -07:00

fuse_dlm

test/fuse_dlm: cross-mount POSIX locks + survival across a ring change (#9677)

2026-05-25 16:20:23 -07:00

fuse_integration

fix(fuse-tests): pass glog flags before the mount subcommand (#10215)

2026-07-02 18:01:57 -07:00

fuse_p2p

chore(filer): remove -mount.p2p flag; registry is always on (#9183)

2026-04-21 23:00:11 -07:00

java/spark

build(deps): bump com.fasterxml.jackson.core:jackson-databind from 2.18.6 to 2.22.0 in /test/java/spark (#10094)

2026-06-24 19:12:48 -07:00

kafka

build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /test/kafka/kafka-client-loadtest (#10265)

2026-07-08 01:23:00 -07:00

kms

fix: serialize SSE-KMS metadata when bucket default encryption applies KMS (#8780)

2026-03-26 14:07:01 -07:00

master_cold_start

fix(master): let the growth initiator wait instead of shedding itself (#10202)

2026-07-02 15:13:46 -07:00

metadata_subscribe

fix: keep metadata subscriptions progressing (#8730) (#8746)

2026-03-23 15:26:54 -07:00

mq

fix: add missing backslash for volume extraArgs in helm chart (#7676)

2025-12-08 23:21:02 -08:00

multi_master

go fmt

2026-04-10 17:31:14 -07:00

perf

Perf CI: benchmark the Rust volume server and report memory usage (#10111)

2026-06-25 10:52:23 -07:00

pjdfstest

ci(pjdfstest): cache docker layers via GHA to avoid apt mirror flakes (#9106)

2026-04-16 12:50:19 -07:00

plugin_workers

fix(ec): don't mix EC shards from different encode runs (#9880)

2026-06-10 22:31:18 -07:00

postgres

update go version

2026-03-09 11:12:05 -07:00

random_access

Java 3.59

2023-11-13 08:23:53 -08:00

s3

s3: paginate ListBuckets and serve it from a bucket owner index (#10214)

2026-07-02 21:11:41 -07:00

s3tables

admin: browse Iceberg table data (#10227)

2026-07-03 14:02:44 -07:00

samba

test: fix fd leak in the Samba DLM handoff test (promote xfail checks) (#9592)

2026-05-20 16:17:13 -07:00

sftp

sftp: match permission paths on path-component boundaries (#10311)

2026-07-10 22:10:01 -07:00

testutil

test: keep mini-allocated ports below the ephemeral floor (#10209)

2026-07-02 15:11:56 -07:00

tls_rotation

feat(security): hot-reload HTTPS certs without restart (k8s cert-manager) (#9181)

2026-04-21 20:20:11 -07:00

tus

Add TUS protocol support for resumable uploads (#7592)

2025-12-14 21:56:07 -08:00

vacuum

test(vacuum): fix flaky TestVacuumIntegration across multiple volumes (#9061)

2026-04-13 17:56:32 -07:00

volume_server

fix(ec): never delete recoverable EC shards on startup/reconcile (the non-empty-.dat sibling of the stub bug) (#9941)

2026-06-12 23:51:29 -07:00