1.24.10 — Least-privilege JobEngine identity proof

2026-09-09

django-mojo 1.24.10 lets MojoSec prove a live JobEngine’s executable identity across the application/root UID boundary without granting process-tracing authority to the network-capable sensor. Proven firewall broker work can therefore remain local-only instead of flooding the central security stream. No migrations or consumer code changes are required.

Fixed

• Live JobEngine anchors now retain their kernel start generation and executable identity when the sensor and application run under different UIDs, allowing fully proven firewall reconciliations to stay out of the central event stream.

Security

• Cross-UID executable lookup now uses a root-only local socket backed by an unprivileged application-user helper with no capabilities or IP network access; the main MojoSec service never receives CAP_SYS_PTRACE.
• Deployment restarts changed socket definitions, refreshes the helper with the sensor on later framework upgrades, and audits the effective listener, target, permissions, capabilities, networking, and drop-ins.

Upgrade notes

• Observe-mode hosts must provide kernel.yama.ptrace_scope >= 1. Deployment leaves identity proof fail-open when the requirement is unavailable, and node checks report the missing protection.