mirror of
https://github.com/CyberMind-FR/secubox-deb.git
synced 2026-07-29 09:14:33 +00:00
Reconcile the three pieces the webui→ctl delegation needs to actually work: NoNewPrivileges=yes on the daemon unit neutralized sudo, and sudoers.d granted to the wrong user (secubox instead of secubox-meshtastic, the daemon's actual User=). Verified _ctl_cb's systemd-run argv matches the sudoers command lines for set-mode/set-grid token-for-token. Also demote mosquitto from Depends to Recommends (module never installs/ runs it; README already documents opt-in setup) and add sudo to Depends for the ctl delegation. Minor cleanups: unused `field` import in model.py, dead gridpolicy re-export in daemon.py, and a malformed broker port (e.g. host:abc) no longer crashes Bridge.start() at daemon startup. Deferred: append a note to the multigrid design spec about the gridpolicy/bridge default broker-port mismatch (8883 vs 1883) and the nft hostname-resolved-once caveat for future on-grid containment work. |
||
|---|---|---|
| .. | ||
| architecture | ||
| assets | ||
| cspn | ||
| demos | ||
| design | ||
| errata | ||
| eye-remote | ||
| hardware | ||
| marketing | ||
| notes | ||
| reference | ||
| references/gst | ||
| reports | ||
| screenshots | ||
| specs | ||
| superpowers | ||
| wiki | ||
| AI-BUILD-PROMPT.md | ||
| AI-HANDOVER-cabine-evolution.md | ||
| AI-HANDOVER-mistral.md | ||
| CACHE-PATTERN.md | ||
| FAQ-BUSYBOX-RESCUE.md | ||
| FAQ-KBIN-TOR.md | ||
| FAQ-LXC-DNS.md | ||
| grammar.md | ||
| LED-HEALTHBUMP.md | ||
| LIVE-USB.md | ||
| MODULE-GUIDELINES.md | ||
| MODULES.md | ||
| OPENWRT-CRT-THEME.md | ||
| OPENWRT-DEBIAN-COMPARISON.md | ||
| OPENWRT-MASTERLINK.md | ||
| OPENWRT-MESH-DAEMON.md | ||
| P2P-EVOLUTIONS-POSTER-PROMPT.md | ||
| PROMPT-BUSYBOX-TECHTIP.md | ||
| SCREENSHOTS-VM.md | ||
| SECUBOX-DEV-METHODOLOGY.md | ||
| TOOLS.md | ||
| UI-GUIDE.md | ||