Sovran_Systems/Sovran_SystemsOS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 5 Wiki Activity
2,194 Commits 2 Branches 9 Tags
9befcd06e6f7968fe01b4046c213a563180b4a0d
Commit Graph
12 Commits
Author SHA1 Message Date
Contributorandnaturallaw777 8a766181de fix: hash root password instead of storing in clear text (CWE-312) 
- Replace plain-text write of new_root_password in api_security_reset()
  with scrypt-hashed storage via _hash_password(), matching how the free
  password is already handled.

- Return new_root_password in the API response so the user sees it once
  before it is irreversibly hashed on disk.

- Teach _resolve_credential() to detect scrypt hashes and display a
  human-readable placeholder instead of raw hex in the Hub credentials UI.

- Harden root-password-setup systemd service: if the secrets file already
  contains a hash, skip chpasswd so a manual restart never sets the hash
  as the literal login password.
 2026-08-07 12:34:13 -05:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		25e00bd1f1 refactor: use systemd.tmpfiles for GNOME Keyring, simplify reset scripts 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/71dab9c7-081f-4e45-80c2-080e88ae6207

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-30 13:52:27 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		e64217be28 fix: seed GNOME Keyring default pointer on fresh installs, resets, and migrations 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/c3f5b4ac-12ed-4ff9-ac7c-f07be1f178d9

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-30 13:14:10 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		8076e2db96 Fix legacy migration flow: move chpasswd to password-acknowledge endpoint 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/6ad42ef5-884b-4945-b49e-76b3e6c34088

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-30 01:42:01 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		04a90a3a38 Fix GDM login loop: replace broken PAM hook with free-password-migration systemd service 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/c958784d-bc79-4784-9ec6-6d52fd3f574e

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-30 01:27:01 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		13c356e5b5 fix: add set -euo pipefail and boot ordering to password-setup services 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/2f9c39e8-d673-4314-bff7-28f1fffd48a0

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-30 00:52:17 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		5357bfb43c fix migration-safe free password flow for desktop roles 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/59fc567c-4bd4-44ab-a2ff-8e74854030e5

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-17 03:30:26 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		47686017ba Fix chpasswd: remove broken chroot from installer, defer to first-boot service 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/e55c1e70-0958-4d77-a222-52dccc9459b2

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-12 23:10:19 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		2b26472505 fix: disable auto-login, diceware passwords, improved security reset UX, fix GNOME keyring 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/82a54a25-4844-4a41-afcc-c034cebbd6ed

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-12 15:08:25 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		991acfd143 Add gnome-keyring-unlock service and update change-free-password to re-key keyring 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/311643b0-e3d5-4ee5-a8f8-da5baa59cab8

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-12 11:47:42 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		66271c9227 Implement security overhaul: remove seal/legacy system, add Security modal and random passwords 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/6e7593c4-f741-4ddc-9bce-8c558a4af014

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-09 01:58:42 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		41b326ecf3 Remove all PDF references: rename credentials-pdf.nix and update references 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/150954c9-65a0-4d5b-b8e2-08f301f07511

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-07 15:04:33 +00:00