eric/geth
Watch
1
0
Fork
You've already forked geth
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Test denied remote operations do not mutate state

Browse source
This commit is contained in:
Eric Wendland 2026-05-22 14:14:56 +02:00
commit a2935328ce
2 changed files with 164 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
docs/roadmap.md
View file

@ -18,7 +18,9 @@ Implementation order:
1. `[~]` Close remote authorization and replicated-state safety gaps.
Acceptance criteria:
- `[ ]` Add tests proving denied remote operations do not mutate local state.
- `[x]` Add initial two-daemon tests proving denied remote pubsub publish,
remote pipe listen, and SSH admin shell requests do not mutate serving
node state.
- `[ ]` Add tests proving unsigned, invalidly signed, and conflicting
replicated records do not mutate trust/resource state.
- `[ ]` Improve `auth explain` diagnostics enough for operators to
@ -74,6 +76,8 @@ Implementation order:
check before mutating local state or opening a host service.
- `[ ]` Tests cover denied and allowed paths for CAS, KV, DB, document,
pubsub, pipe, SSH proxy/admin shell, SSH cert metadata, and revocations.
- `[x]` Initial two-daemon denied-mutation coverage exists for remote pubsub
publish, remote pipe listen, and SSH admin shell.
- `[ ]` `auth explain` output can explain discovered-only peers, missing
endpoint bindings, missing grants, matching grants, revocations, and bearer
access.