diff options
| author | tanaka takashi <isazaka@gmail.com> | 2026-08-13 23:20:20 +0900 |
|---|---|---|
| committer | tanaka takashi <isazaka@gmail.com> | 2026-08-13 23:20:20 +0900 |
| commit | e07183ee6d3e57da325213e898cdcd6687320f53 (patch) | |
| tree | a05a71ec3ed419d54f450a0105ec22973c66a66b /tests/Agent.Admin.AcceptanceHarness/Agent.Admin.AcceptanceHarness.csproj | |
| parent | 9337ac3e5edd42bb17f5e2ade6c2de02c7ef576d (diff) | |
test(security): close on-demand elevation acceptance gaps
Add an actual-process acceptance harness for the administrative Named Pipe boundary. Exercise production pipe creation and peer PID inspection, remote-form client rejection, Task and protocol identity mismatch, duplicate network application, oversized frames, and an intentional helper-crash recovery point without adding test-only operations to the privileged protocol.
Add a reusable PowerShell attack-matrix runner that preserves the helper parent-image check and drives the self-contained published helper through real UAC. Refactor the client pipe setup into internal diagnostic hooks while leaving the production DACL, PIPE_REJECT_REMOTE_CLIENTS, PID comparison, and helper lifetime behavior unchanged.
Record the completed UAC rejection, HTTP MCP server-continuity, helper crash, startup Recovery rejection/success, loopback restoration, WFP residue, and regression evidence. Promote the three on-demand elevation traceability rows from PARTIAL to PASS and capture the 80-test Windows Security/Recovery result and final Bundle checksum.
Verified: Release build warning/error 0; Core 105 PASS; Planner 10 PASS; administrative boundary 4 PASS; Windows Security/Recovery 80 PASS with skip 0; actual IPC attack matrix PASS; actual Task-time and Recovery-time UAC rejection PASS; Journal/backup/main/helper residue 0; fresh self-contained Bundle show PASS.
Diffstat (limited to 'tests/Agent.Admin.AcceptanceHarness/Agent.Admin.AcceptanceHarness.csproj')
| -rw-r--r-- | tests/Agent.Admin.AcceptanceHarness/Agent.Admin.AcceptanceHarness.csproj | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/tests/Agent.Admin.AcceptanceHarness/Agent.Admin.AcceptanceHarness.csproj b/tests/Agent.Admin.AcceptanceHarness/Agent.Admin.AcceptanceHarness.csproj new file mode 100644 index 0000000..cbca477 --- /dev/null +++ b/tests/Agent.Admin.AcceptanceHarness/Agent.Admin.AcceptanceHarness.csproj @@ -0,0 +1,12 @@ +<Project Sdk="Microsoft.NET.Sdk"> + <PropertyGroup> + <OutputType>Exe</OutputType> + <AssemblyName>Agent.Admin.AcceptanceHarness</AssemblyName> + <RootNamespace>Agent.Admin.AcceptanceHarness</RootNamespace> + <TargetFramework>net10.0-windows10.0.26100.0</TargetFramework> + </PropertyGroup> + <ItemGroup> + <ProjectReference Include="..\..\src\Agent.Admin\Agent.Admin.Client\Agent.Admin.Client.csproj" /> + <ProjectReference Include="..\..\src\Agent.Windows\Agent.Windows.csproj" /> + </ItemGroup> +</Project> |