Docker container fast path bypassing deny policy
Cluster 91002 · environments. Data as of
Nothing open on GitHub. Fix merged in #103649 on 5 Sep 2026. Check it covers your case.
The short answer
- Known?
- Yes. 3 related items grouped here, 1 issue already closed.
- Fix event
- A fix was merged to main in PR #103649. Check it covers your case. No release data is tracked.
- Tracker
- The maintainers' tracker marks this
resolved, deciding PR #103649. That is separate from the fix event. - Still open
- Nothing open on GitHub.
A bug where Docker execution without host mounts skips the approvals.deny policy entirely via a container fast path, plus associated fixes to enforce deny policy inside isolated Docker and cloud sandboxes.
Open issues0
Open PRs0
Fixes on record
-
#103649 fix(approval): approvals.deny is enforced inside isolated Docker/cloud sandboxes, not skipped by the container fast path (#91002, salvage #91029)
files:
hermes_cli/approvals_test.py,tests/tools/test_approval_deny_rules.py,tools/approval.py
1 PR closed without merging
From the close comments: done elsewhere 1
-
#91029 fix(approval): prevent Docker authorization bypass of deny policy · done elsewhere →
9e23028,#103649
Closed issues · 1
- Closed#91002[Bug]: Docker without host mounts skips the entire approvals.deny policy via the container fast path (not a single-rule exemption or matcher bug)
How this cluster was grouped
-
Link evidence (
structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference. -
Pairwise link density
0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36.1.00means every pair is linked.
Pick up a Lab task
Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.
Open the LabAt a glance
- Subsystem
- environments
- Merged PRs
- #103649
- Closed issues
- 1
- Attempts
- 1 PR closed without merging
- Fix link checked
- 5 Sep 2026