Skip to content

Tighten acquisition output permissions - #113

Merged
besendorf merged 2 commits into
mainfrom
fix/acquisition-output-permissions
Jul 29, 2026
Merged

Tighten acquisition output permissions#113
besendorf merged 2 commits into
mainfrom
fix/acquisition-output-permissions

Conversation

@besendorf

Copy link
Copy Markdown
Collaborator

Summary

  • create new acquisition output directories with owner-only permissions
  • keep archives owner-writable during acquisition, then make them read-only after successful finalization
  • refuse to overwrite an existing acquisition archive
  • cover directory, in-progress archive, finalized archive, and overwrite behavior with tests

AndroidQF now streams each acquisition into a single archive, so the original directory-tree lockdown described in the issue no longer applies. This updates the hardening for the current archive output model without changing permissions on an existing user-selected output directory.

Closes #95

@besendorf
besendorf merged commit 98c9ca2 into main Jul 29, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Tighten acquisition output permissions for evidence integrity

1 participant