115810eae3
_find_sensitive_paths does not match /etc/passwd (it lives in the open-call gate's _SENSITIVE_FILE_PREFIXES list, not in _ABSOLUTE_SENSITIVE), so a chained reassign p='/etc/hosts'; p='/etc/passwd'; open(p) kept /etc/hosts as the representative and slipped through. Duplicate the open-call prefix list in the pre-pass scope so _looks_sensitive catches /etc/passwd and the analogous /proc/<pid> reads too. |
||
|---|---|---|
| .. | ||
| data_recipe | ||
| export | ||
| inference | ||
| training | ||
| __init__.py | ||