mirror of
https://github.com/CyberMind-FR/secubox-deb.git
synced 2026-07-29 09:14:33 +00:00
Reconcile the three pieces the webui→ctl delegation needs to actually work: NoNewPrivileges=yes on the daemon unit neutralized sudo, and sudoers.d granted to the wrong user (secubox instead of secubox-meshtastic, the daemon's actual User=). Verified _ctl_cb's systemd-run argv matches the sudoers command lines for set-mode/set-grid token-for-token. Also demote mosquitto from Depends to Recommends (module never installs/ runs it; README already documents opt-in setup) and add sudo to Depends for the ctl delegation. Minor cleanups: unused `field` import in model.py, dead gridpolicy re-export in daemon.py, and a malformed broker port (e.g. host:abc) no longer crashes Bridge.start() at daemon startup. Deferred: append a note to the multigrid design spec about the gridpolicy/bridge default broker-port mismatch (8883 vs 1883) and the nft hostname-resolved-once caveat for future on-grid containment work. |
||
|---|---|---|
| .. | ||
| integration-tests | ||
| plans | ||
| runs | ||
| specs | ||