@ai-ecoverse/slicc-kernel 1.47.0 → 1.47.1

package/README.md

@@ -495,7 +495,7 @@ OPFS stays authoritative: an entry is consulted only for a path that exists in O
 
 The database is `slicc-kernel` (or the `metadata` option), schema version 1, with one object store, `entries`, keyed by absolute path (`keyPath: 'path'`) and an index `dir` on the parent directory of symlinks. A record looks like `{ path, mode?, atimeMs?, mtimeMs?, mtimeFor?, ctimeMs?, ino?, link?, dir? }`, where `mtimeFor` is the OPFS `lastModified` an explicit `mtimeMs` belongs to. A future schema bumps the version and migrates in `onupgradeneeded`; an older kernel then closes its connection. The sidecar is keyed by path from the `root` handle, so use a different `metadata` name for each distinct root.
 
-Not covered: hard links (they fail with `EMLINK`, as Emscripten reports; OPFS cannot share contents between names) and file ownership. Emscripten's `chown` doesn't pass the owner to filesystem backends, so there is nothing to store, and processes see every file as owned by uid and gid 1000. Emscripten also doesn't enforce permission bits, so a file runs whether or not its exec bit is set; the bits are what `ls`, `stat` and `test` report.
+Not covered: hard links (they fail with `EMLINK`, as Emscripten reports; OPFS cannot share contents between names) and file ownership. Emscripten's `chown` doesn't pass the owner to filesystem backends, so there is nothing to store. Until owners are stored, an Emscripten process sees every file as owned by its own effective uid and gid (root's 0 by default, a user's own ids when it runs as one, and the new ids after a `setuid`), so owner checks such as git's `safe.directory`, ssh's key checks and gnupg's home directory check pass, as WASIX programs already see through their libc. Emscripten also doesn't enforce permission bits, so a file runs whether or not its exec bit is set; the bits are what `ls`, `stat` and `test` report.
 
 Reads retry briefly when a concurrent write has invalidated the OPFS file snapshot (`NotReadableError`).
 

package/dist/kernel-worker.js

@@ -10206,7 +10206,7 @@ function openLane(token, dispatch2) {
     }
   };
 }
-function processInit(opts, sab, umask, lane) {
+function processInit(opts, sab, umask, cred, lane) {
   const base = {
     type: WASM_PROCESS_INIT,
     pid: opts.shownPid ?? opts.pid,
@@ -10216,6 +10216,7 @@ function processInit(opts, sab, umask, lane) {
     cwd: opts.cwd,
     sab,
     umask,
+    cred,
     ...opts.ppid !== void 0 ? { ppid: opts.ppid } : {}
   };
   if (opts.program.abi === "js") {
@@ -10394,13 +10395,14 @@ function spawnWasmProcess(opts) {
       env: opts.env,
       cwd: opts.cwd,
       sab: tsab,
+      cred: copyCred(process.cred),
       ...opts.ppid !== void 0 ? { ppid: opts.ppid } : {},
       thread
     };
     tw.postMessage(tinit);
   };
   worker.postMessage(
-    processInit(opts, sab, process.umask, lane?.lane),
+    processInit(opts, sab, process.umask, copyCred(process.cred), lane?.lane),
     transferOf(opts, lane?.lane)
   );
   const signal = (sig) => {