Under the hoodTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
Plugin EvalArea: what it touches
Internal ChangesKind: in v2.1.235,
Internal ChangesSection of the release
A large new trust layer checks the plugin tree before its manifest is consulted: owner uid against the real (or sudo-verified) user, other-writable and group-writable file modes, sticky ancestors, hard links, symlinks leaving the tree, .git metadata not created locally, and an entry/depth cap on the directory walk.
Group membership is resolved by parsing /etc/group, /etc/passwd, and /etc/nsswitch.conf; if nsswitch names a non-file group source, membership is declared unverifiable and reported as such rather than assumed safe. SUDO_UID, SUDO_GID, and SUDO_USER are cross-checked against /usr/bin/id, and container evidence from /run/.containerenv or /proc/1/cgroup relaxes the ownership rules.
