Skip to content

VM_CONTACT: check d ignores root-only dirs; exit 9 points to U6 - #92

Open
erinepshovel-code wants to merge 1 commit into
mainfrom
fix/vm-contact-check-d-and-p3
Open

erinepshovel-code wants to merge 1 commit into
mainfrom
fix/vm-contact-check-d-and-p3

Conversation

@erinepshovel-code

Copy link
Copy Markdown
Contributor

Follow-ups to #86 on backend/deploy/VM_CONTACT.md. Based on main faf2654, which includes #86 (85c86bd) and #89 (3d74cf1).

Changes

  • Check d: the vmmcp-writable find now prunes directories vmmcp cannot enter (-type d ! -executable -prune -o -writable -print), such as the root-only /opt/vm-mcp/__pycache__. Nothing inside such a directory is reachable by vmmcp, and the directory itself isn't writable by vmmcp. Any other find error still sets READ-FAILED and prints FAIL, for example a directory vmmcp can enter but not list.

  • Runbook test: test_vm_contact_runbook checks that the guard is present, then runs the published find line against a temp tree:

    • an unsearchable dir gives an empty result and a pass;
    • a writable file is listed;
    • an enterable but unlistable dir still gives READ-FAILED.

    The behaviour test is skipped when run as root.

  • Review P3: the exit-9 note now says U4 has already stopped the units, so the MCP path is down, and points to U6.

  • Review P3: removed the stray leading space before "#127 hardens the installer".

Not in this PR

vm-mcp-127-check.sh isn't tracked in stack or skill-lib. Its read-only sysctl fix was made only to the operator's local copy.

hmmm

  • The check-d change hasn't been run on a VM; the test simulates the permissions as a non-root user.

Check d's vmmcp-writable find prunes directories vmmcp cannot enter
(the root-only __pycache__), so their permission error no longer reads
as READ-FAILED; any other find error still does. A runbook test runs
the published find against a temp tree. The exit-9 note now says U4 has
already stopped the units and points to U6, and a stray leading space
is removed.
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 20, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-20T02:38:55.783473Z ae5ead3 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant