Sahilb315 748d40c14f fix: harden system dirs at install; keep sudo attribution without passwd ...

Address remaining review comments:

- shim: force root:root 0755 on the managed system dirs (shim tree and
  profile.d) after MkdirAll. A pre-created dir with weaker ownership,
  possible under Debian's group-writable /usr/local/lib, would let a
  non-root user replace the shims every account executes.

- audit: when SUDO_USER has no passwd entry (minimal containers),
  attribute cloud events from sudo's recorded SUDO_USER/SUDO_UID env
  instead of falling back to root. Still gated on euid 0.

- setup: reword the root-without---system warning; alias/shim install
  follows HOME, so claiming it configures only root's home was wrong.

- shim: skip the non-root-owner validation test on Windows, where file
  ownership is not resolvable.

2026-07-14 13:24:08 +05:30

..

cache_test.go

feat: Add malysis cache implementation with proxy flow integration (#346)

2026-06-22 10:12:02 +05:30

cache.go

feat(proxy): persistent proxy server mode (#351)

2026-06-26 11:19:28 +05:30

cert_test.go

feat: Add opt-in support for proxy CA cert installation (#318)

2026-06-03 23:15:02 +05:30

cert.go

feat: Add opt-in support for proxy CA cert installation (#318)

2026-06-03 23:15:02 +05:30

doctor_ca_test.go

feat: Add opt-in support for proxy CA cert installation (#318)

2026-06-03 23:15:02 +05:30

doctor_test.go

fix: gate SUDO_USER trust and root path diversion; add doctor binary check

2026-07-14 13:07:27 +05:30

doctor.go

fix: gate SUDO_USER trust and root path diversion; add doctor binary check

2026-07-14 13:07:27 +05:30

info.go

fix: harden and simplify Linux system install

2026-07-11 02:19:59 +05:30

setup_test.go

fix: address system-install review findings

2026-07-14 00:44:44 +05:30

setup.go

fix: harden system dirs at install; keep sudo attribution without passwd

2026-07-14 13:24:08 +05:30