secubox-deb/packages/secubox-mitmproxy/debian
CyberMind 56e5f02bd6
feat(secubox-mitmproxy): cookie-audit hardening — AppArmor + logrotate (closes #170) (#171)
Ship two post-deploy artifacts requested by #156:

  - /etc/apparmor.d/abstractions/secubox-cookie-audit
    Operators with an enforced usr.bin.mitmdump AppArmor profile can
    #include this abstraction to grant the addon rw on the ledger paths
    (/var/log/secubox/cookie-audit/** + /var/lib/secubox/cookie-audit/**).
    No-op on boards without AppArmor enforcement.

  - /etc/logrotate.d/secubox-cookie-audit
    Daily rotation of /var/log/secubox/cookie-audit/server.jsonl,
    14 days kept, 50M maxsize, copytruncate so the running addon keeps
    its fd open across rotations (no SIGUSR1 dance needed).

Both files installed by debian/rules into the existing package layout —
no new dependencies, no postinst changes.

Co-authored-by: CyberMind-FR <gandalf@Gk2.net>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-17 08:37:17 +02:00
..
changelog feat(secubox-mitmproxy): cookie-audit hardening — AppArmor + logrotate (closes #170) (#171) 2026-05-17 08:37:17 +02:00
control fix(mitmproxy): Add xz-utils to dependencies 2026-05-03 09:34:59 +02:00
cookie-audit.apparmor feat(secubox-mitmproxy): cookie-audit hardening — AppArmor + logrotate (closes #170) (#171) 2026-05-17 08:37:17 +02:00
cookie-audit.logrotate feat(secubox-mitmproxy): cookie-audit hardening — AppArmor + logrotate (closes #170) (#171) 2026-05-17 08:37:17 +02:00
mitmproxy.toml feat(mitmproxy): Add configuration files and WAF rules 2026-05-03 08:11:03 +02:00
postinst fix(mitmproxy): Remove unnecessary symlink from postinst 2026-05-03 08:05:01 +02:00
prerm feat(mitmproxy): Add package scaffold and debian files 2026-05-03 08:03:00 +02:00
rules feat(secubox-mitmproxy): cookie-audit hardening — AppArmor + logrotate (closes #170) (#171) 2026-05-17 08:37:17 +02:00
secubox-mitmproxy.service feat(mitmproxy): Add package scaffold and debian files 2026-05-03 08:03:00 +02:00
secubox.yaml feat(secubox): complete meta-script generator Tasks 14-17 2026-05-11 05:32:29 +02:00