>_
.issue.db
/highway
Dashboard
Issues
Memory
Lessons
Audit Log
New Issue
Edit Issue #939
Update issue details
Title *
Description
EARS: If a workflow task runs a shell command, it shall not be able to reach the Docker daemon. Workers mount /var/run/docker.sock and ship the docker CLI, so tools.shell.run 'docker run --privileged -v /:/h ...' gets around engine/tools/docker/policy.py completely. Belongs with #915 (shell sandbox on by default, fail-closed). The docker host is also shared with other platforms (crypto-trader, ledger, pdfapi, tokengate, tracker), so the blast radius goes beyond Highway.
Priority
Low
Medium
High
Critical
Status
Open
In Progress
Closed
Won't Do
Due Date (YYYY-MM-DD)
Tags (comma separated)
Related Issues (IDs)
Enter IDs of issues related to this one. They will be linked as 'related'.
Update Issue
Cancel