Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
ElsewhereArea: what it touches
ImprovementsKind: in v2.1.234,
ImprovementsSection of the release
What
Copying a task's output file now verifies it is an ordinary file with a single link before and after opening it, and refuses if anything changed in between.
Details
Checks for a regular file with link count 1, opens refusing symlinks and without blocking, then re-verifies device, inode and link count through the open handle.
Refuses on ELOOP, EISDIR, ENOTDIR, ENXIO and EOPNOTSUPP, or on any change between the first check and the open, with a logged error.
Evidence
task output swap refused
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
