mwiegand 37309ba399 spec(hardening-test-plan): fix four bugs surfaced by executor ... Four corrections noted by the test plan's executor in commit 461b8d0: - PID-lookup race: pgrep+head can pick the wrong instance. Replace with systemctl show -p MainPID --value left4me-server@N.service. - gdb-from-host ptrace check: nsenter into only the mount namespace with root caps bypasses the SECCOMP filter, so the test is a false positive. Replace with systemd-run-with-same-directives probe, or syscall-filter inspection. - D5 pgrep pattern: 'srcds_linux.*\@2' doesn't match because @N is in the unit name, not argv. Use systemctl show -p MainPID. - scmp_sys_resolver is in the seccomp package on Debian 13, not libseccomp-dev. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-05-15 14:58:46 +02:00
..
plans	plan(hardening-refactor): implementation plan against the proven composition	2026-05-15 14:25:25 +02:00
specs	spec(hardening-test-plan): fix four bugs surfaced by executor	2026-05-15 14:58:46 +02:00