6 Commits

Author	SHA1	Message	Date
StingNing	944abe0a6c	fix(security): recognize localized Windows SYSTEM account in ACL audit (#29698) ... * fix(security): recognize localized Windows SYSTEM account in ACL audit On non-English Windows (e.g. French "AUTORITE NT\Système"), the security audit falsely reports fs.config.perms_writable because the localized SYSTEM account name is not recognized as trusted. Changes: - Add common localized SYSTEM principal names (French, German, Spanish, Portuguese) to TRUSTED_BASE - Add diacritics-stripping fallback in classifyPrincipal for unhandled locales - Use well-known SID *S-1-5-18 in icacls reset commands instead of hardcoded "SYSTEM" string for locale independence Fixes #29681 * style: format windows acl files --------- Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com>	2026-03-02 08:38:56 -06:00
Peter Steinberger	bd4f670544	refactor: simplify windows ACL parsing and expand coverage	2026-02-22 10:43:03 +01:00
SK Akram	85a3c0c818	fix: use SID-based ACL classification for non-English Windows	2026-02-22 10:37:34 +01:00
cpojer	f06dd8df06	chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.	2026-02-01 10:03:47 +09:00
cpojer	5ceff756e1	chore: Enable "curly" rule to avoid single-statement if confusion/errors.	2026-01-31 16:19:20 +09:00
Peter Steinberger	ab73aceb27	fix: use Windows ACLs for security audit	2026-01-26 18:19:58 +00:00