Repository navigation
Security feedback: SSH hardening and policy validation #7
Description
Context
Security hardening work is required to improve SSH and policy enforcement safeguards.
Requested work
- Further harden ssh security
- Fine-tune seccomp policies.
- Enforce mTLS certificate validation.
- Add checks to verify
setgidandsetuidcalls succeed. - Add policy validation to ensure corrupted or maliciously modified policies do not cause unsafe behavior.
Definition of done
- Security hardening changes are implemented and validated.
- Failure modes are explicit, with safe defaults when validation fails.
- Tests or checks cover the new validation and enforcement paths.
Originally by @drew on 2026-02-12T17:58:51.059-08:00
Activity
pimlock commentedon Feb 27, 2026
Additional security review here, https://docs.google.com/document/d/1BpszyWkTepMN5DRaraA9AWQKgfdBqINUBpVRbLmlSeU/edit?tab=t.0.
This document should be broken up into tickets.
Originally by @drew on 2026-02-19T08:23:28.602-08:00
drew commentedon Mar 4, 2026
This ticket is duplicated by other more specific tickets. Closing this in favor of the others.
feat(welcome-ui): parallel sandbox provisioning with inline API key f…
Merge pull request NVIDIA#7 from maxamillion/container-builds
doc: mark SUPERVISOR_DECIDE_POST_NEVER_REACHES_ENDPOINT.md resolved; …
fix(sdk/go): address principal engineer review findings
fix(sdk/go): address should-fix review items
fix(sdk/go): address principal engineer review findings
fix(sdk/go): address should-fix review items
feat(sdk/go): add Go SDK foundation, types, and sandbox client (A) (N…