3 Commits

Author	SHA1	Message	Date
ymq	f3e81a69db	security: Wterm(workspace_edit) bwrap沙箱化，防 rm -rf/sudo提权/越界/网络攻击 ... - vi 编辑包进 bwrap 沙箱：只暴露 workspace(挂/home) + 只读系统目录 - --unshare-user/pid/ipc/uts/net 隔离，no_new_privileges 阻断 sudo setuid - bwrap 缺失时拒绝终端（安全优先，不给完整 shell）	2026-08-13 18:33:31 +08:00
p	9f4307b5d9	workspace: fix xterm cmdargs (asyncssh create_process single command)	2026-08-13 17:00:42 +08:00
p	e19f5c5a2e	workspace: open dispatch (vi/office-pdf/media) + file serving + edit xterm	2026-08-13 16:40:13 +08:00