0 Releases 20 Tags

RSS Feed

• v0.6.0 97be306fd2

  Compare

  release: bump version to v0.6.0

  leviathan released this 2026-05-23 04:22:18 +00:00 | 40 commits to main since this release

  This release captures the session's reliability + accuracy work
  on top of v0.5.0:

  • Shared host fingerprint (core/host.{h,c}): kernel/distro/userns
    gates / sudo + polkit versions, populated once at startup; every
    module consults ctx->host instead of doing its own probes.
  • Test harness (tests/test_detect.c, make test): 44 unit tests over
    mocked host fingerprints, wired into CI as a non-root step.
  • --auto upgrades: auto-enables --active, per-detect 15s timeout,
    fork-isolated detect + exploit so a crashing module can't tear
    down the dispatcher, per-module verdict table + scan summary.
  • --dry-run flag (preview without firing; --i-know not required).
  • Pinned mainline fix commits for the 3 ported modules
    (dirtydecrypt / fragnesia / pack2theroot) — detect() is now
    version-pinned with kernel_range tables, not precondition-only.
  • New modules: dirtydecrypt (CVE-2026-31635), fragnesia
    (CVE-2026-46300), pack2theroot (CVE-2026-41651).
  • macOS dev build works for the first time (all Linux-only code
    wrapped in #ifdef linux).
  • docs/JSON_SCHEMA.md: stable consumer contract for --scan --json.

  Version bump:

  • SKELETONKEY_VERSION = '0.6.0' in skeletonkey.c
  • README status line updated with the v0.6.0 changelog
  • docs/JSON_SCHEMA.md example refreshed

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)