mirror of
https://github.com/CyberMind-FR/secubox-deb.git
synced 2026-07-28 21:17:36 +00:00
CyberMind-FR
213ff21c0d
Aggregator-served panel (User=secubox) cannot read/write 0750 root:root /etc/secubox/waf. Both routes now shell out to the root CLI (--json preview, --apply --json write) via scoped exact-command sudoers grants. Adds CLI --json. Co-Authored-By: Gerald KERMA <devel@cybermind.fr>
20 lines
1.1 KiB
Makefile
Executable File
20 lines
1.1 KiB
Makefile
Executable File
#!/usr/bin/make -f
|
|
%:
|
|
dh $@
|
|
|
|
override_dh_auto_install:
|
|
install -d debian/secubox-cve-triage/usr/lib/secubox/cve-triage
|
|
cp -r api debian/secubox-cve-triage/usr/lib/secubox/cve-triage/
|
|
install -d debian/secubox-cve-triage/usr/share/secubox/www/cve-triage
|
|
cp -r www/cve-triage/. debian/secubox-cve-triage/usr/share/secubox/www/cve-triage/
|
|
install -d debian/secubox-cve-triage/usr/share/secubox/menu.d
|
|
[ -d menu.d ] && cp -r menu.d/. debian/secubox-cve-triage/usr/share/secubox/menu.d/ || true
|
|
install -d debian/secubox-cve-triage/usr/sbin
|
|
install -m 0755 sbin/secubox-cvectl debian/secubox-cve-triage/usr/sbin/
|
|
install -d debian/secubox-cve-triage/usr/lib/secubox/cve-triage/nuclei-subset
|
|
cp -r nuclei-subset/. debian/secubox-cve-triage/usr/lib/secubox/cve-triage/nuclei-subset/
|
|
# sudoers: the panel (User=secubox in the aggregator) delegates the
|
|
# root-only generate flow to secubox-cvectl via exact-command sudo grants.
|
|
install -d debian/secubox-cve-triage/etc/sudoers.d
|
|
install -m 0440 sudoers.d/secubox-cve-triage debian/secubox-cve-triage/etc/sudoers.d/secubox-cve-triage
|