mirror of
https://github.com/CyberMind-FR/secubox-deb.git
synced 2026-07-29 16:37:04 +00:00
FINAL-REVIEW fix wave for tor-enhancement-phase1: - Critical 1: postinst pre-creates + chowns tor-exit-country.txt, tor-vpn-clients.txt, tor-bridges.txt under the 0750 root:secubox-toolbox /etc/secubox/toolbox dir, mirroring the filters.json pattern, so the first CRUD write on a fresh install no longer 500s with PermissionError. - Critical 2: tor_reconcile_persist() now re-applies the torrc HiddenService* stanza whenever the key dir survives but the stanza is missing (torrc reset), not just when the key dir is absent, so a torrc reset no longer leaves a .onion permanently dark. Added _torrc_has_stanza() + repair-path tests. - Packaging: debian/rules now installs sbin/secubox-exposure-tor-reconcile and the matching systemd unit; postinst enables the unit, so boot-time persist actually runs. - Audit: emancipate_webui() now writes a CSPN audit-log entry (operator, action, resulting onion) via a new _audit_exposure_action() helper shared with the existing _audit_exposure() vhost-reach audit path. - Confirmed emancipate_webui() already records local_port=9080 (not 80). |
||
|---|---|---|
| .. | ||
| test_emancipate_webui.py | ||
| test_exclusion.py | ||
| test_exposure_api.py | ||
| test_exposure_packaging.py | ||
| test_exposure_tor.py | ||
| test_exposure_webui.py | ||
| test_mesh_egress.py | ||
| test_reach_acceptance.py | ||
| test_reach.py | ||