policy/v2: evaluate sshTests at write boundary

Browse source

SetPolicy and policy check now compile per-dst SSH rules and replay each sshTests entry. The accept assertion treats check-action rules as reachable; the check assertion requires HoldAndDelegate on the matching rule. Boot reload warns and continues.

...

This commit is contained in:

Kristoffer Dalby 2026-05-13 14:17:04 +00:00

parent 6a0a297c7f

commit 013dea4f40

9 changed files with 39304 additions and 82 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

18758

hscontrol/policy/v2/testdata/sshtest_results/sshtest-malformed-dst-bare-ipv4.hujson vendored Normal file

View file

File diff suppressed because it is too large Load diff

18737

hscontrol/policy/v2/testdata/sshtest_results/sshtest-malformed-dst-bare-ipv6.hujson vendored Normal file

View file

File diff suppressed because it is too large Load diff