mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-10-19 10:33:29 +00:00
6d4694f019
Addresses security concern raised in code review: - Socket permissions changed from 0666 to 0660 - Added SO_PEERCRED verification to authenticate connecting processes - Only allows root (UID 0) or proxy's own user - Prevents unauthorized processes from triggering SSH key rollout - Documented passwordless root SSH requirement for clusters This prevents any process on the host or in other containers from accessing the proxy RPC endpoints. |
||
|---|---|---|
| .. | ||
| development | ||
| images | ||
| API.md | ||
| CONFIGURATION.md | ||
| DOCKER.md | ||
| DOCKER_HUB_README.md | ||
| DOCKER_MONITORING.md | ||
| FAQ.md | ||
| frontend-style-guide.md | ||
| INSTALL.md | ||
| MIGRATION.md | ||
| OIDC.md | ||
| PORT_CONFIGURATION.md | ||
| PROXY_AUTH.md | ||
| REVERSE_PROXY.md | ||
| SCREENSHOTS.md | ||
| SECURITY.md | ||
| TEMPERATURE_MONITORING.md | ||
| TROUBLESHOOTING.md | ||
| VM_DISK_MONITORING.md | ||
| WEBHOOKS.md | ||
| zfs-monitoring.md | ||