  copilot-swe-agent[bot]andnaturallaw777
|
947c04834d
|
Fix all 8 security hardening blockers for PR #423
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
|
2026-08-11 15:38:08 +00:00 |
|
|
copilot-swe-agent[bot]andnaturallaw777
|
a111de1ece
|
Security hardening: fix all 8 blocking findings for PR #419
Fix 1: Update support.js to collect SSH public key and POST JSON
Fix 2: Legacy njalla.sh migration - parse safely, archive non-executable, replace cron with systemd timer
Fix 3: DDNS SSRF prevention - allowlist only njal.la, reject other hosts, disable curl redirects
Fix 4: Legacy root support-key removal migration (_remove_legacy_root_support_key)
Fix 5: Automatic support-key expiration (expires_at + _expire_support_if_stale)
Fix 6: Move security helpers to security_helpers.py, tests import production code
Fix 7: Real NIP-19/Bech32 npub validation (_bech32_decode + _validate_npub)
Fix 8: Replace journalctl sudo wildcard with restricted sovran-journal-helper.py
Also: Make _write_hub_overrides() atomic with tempfile+os.replace
94 tests passing
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
|
2026-08-11 12:07:18 +00:00 |
|
|
copilot-swe-agent[bot]andnaturallaw777
|
9b77b04741
|
Fix IP validation in DDNS and document journalctl sudo rule
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
|
2026-08-11 10:45:50 +00:00 |
|
|
copilot-swe-agent[bot]andnaturallaw777
|
f2ad9c1f17
|
Security hardening: fix DDNS injection, Nix injection, reboot auth, support key, sudo rules
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
|
2026-08-11 10:44:26 +00:00 |
|
|
copilot-swe-agent[bot]andnaturallaw777
|
20e1206f1d
|
Add scoped sudo rules to tech-support.nix for sovran-support user
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/e108b70d-de49-4d19-87a7-f093df3b05d3
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
|
2026-04-09 18:46:13 +00:00 |
|
|
copilot-swe-agent[bot]andnaturallaw777
|
f88c91bfe0
|
Update tech support protected paths: remove root/.lnd, sparrow, bisq; add /home
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/c1303e8b-ff51-4951-b64c-2162d9e9a805
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
|
2026-04-04 13:16:22 +00:00 |
|
|
copilot-swe-agent[bot]andnaturallaw777
|
2203ddb79b
|
Add NixOS tech-support module and security documentation
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/7e7a94ca-202b-4eb5-aa3a-a36a1365574b
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
|
2026-04-04 01:31:56 +00:00 |
|