GeneralBots/botserver
2
1
Fork 0
Code Activity Actions
botserver/src/core/shared
History
Rodrigo Rodriguez (Pragmatismo) faeae250bc Add security protection module with sudo-based privilege escalation 
- Create installer.rs for 'botserver install protection' command
- Requires root to install packages and create sudoers config
- Sudoers uses exact commands (no wildcards) for security
- Update all tool files (lynis, rkhunter, chkrootkit, suricata, lmd) to use sudo
- Update manager.rs service management to use sudo
- Add 'sudo' and 'visudo' to command_guard.rs whitelist
- Update CLI with install/remove/status protection commands

Security model:
- Installation requires root (sudo botserver install protection)
- Runtime uses sudoers NOPASSWD for specific commands only
- No wildcards in sudoers - exact command specifications
- Tools run on host system, not in containers
2026-01-10 09:41:12 -03:00
..
admin.rs feat(auth): Add OTP password display on bootstrap and fix Zitadel login flow 2026-01-06 22:56:35 -03:00
analytics.rs Security audit: Remove all production .unwrap()/.expect(), add SafeCommand, ErrorSanitizer 2025-12-28 21:26:08 -03:00
enums.rs Fix TLS configuration for MinIO, Qdrant, and template structure 2025-12-29 18:21:03 -03:00
memory_monitor.rs Fix tasks UI, WebSocket progress, memory monitoring, and app generator 2025-12-30 22:42:32 -03:00
mod.rs Fix SafeCommand to allow shell scripts with redirects and command chaining 2026-01-08 23:50:38 -03:00
models.rs Add video module, RBAC, security features, billing, contacts, dashboards, learn, social, and multiple new modules 2026-01-08 13:16:17 -03:00
schema.rs Add video module, RBAC, security features, billing, contacts, dashboards, learn, social, and multiple new modules 2026-01-08 13:16:17 -03:00
state.rs Add security protection module with sudo-based privilege escalation 2026-01-10 09:41:12 -03:00
test_utils.rs Add video module, RBAC, security features, billing, contacts, dashboards, learn, social, and multiple new modules 2026-01-08 13:16:17 -03:00
utils.rs Fix SafeCommand to allow shell scripts with redirects and command chaining 2026-01-08 23:50:38 -03:00