botserver/src/settings
Rodrigo Rodriguez (Pragmatismo) faeae250bc Add security protection module with sudo-based privilege escalation
- Create installer.rs for 'botserver install protection' command
- Requires root to install packages and create sudoers config
- Sudoers uses exact commands (no wildcards) for security
- Update all tool files (lynis, rkhunter, chkrootkit, suricata, lmd) to use sudo
- Update manager.rs service management to use sudo
- Add 'sudo' and 'visudo' to command_guard.rs whitelist
- Update CLI with install/remove/status protection commands

Security model:
- Installation requires root (sudo botserver install protection)
- Runtime uses sudoers NOPASSWD for specific commands only
- No wildcards in sudoers - exact command specifications
- Tools run on host system, not in containers
2026-01-10 09:41:12 -03:00
..
audit_log.rs Add video module, RBAC, security features, billing, contacts, dashboards, learn, social, and multiple new modules 2026-01-08 13:16:17 -03:00
menu_config.rs Add video module, RBAC, security features, billing, contacts, dashboards, learn, social, and multiple new modules 2026-01-08 13:16:17 -03:00
mod.rs Add security protection module with sudo-based privilege escalation 2026-01-10 09:41:12 -03:00
permission_inheritance.rs Fix SafeCommand to allow shell scripts with redirects and command chaining 2026-01-08 23:50:38 -03:00
rbac.rs Add video module, RBAC, security features, billing, contacts, dashboards, learn, social, and multiple new modules 2026-01-08 13:16:17 -03:00
rbac_ui.rs Add video module, RBAC, security features, billing, contacts, dashboards, learn, social, and multiple new modules 2026-01-08 13:16:17 -03:00
security_admin.rs Add security protection module with sudo-based privilege escalation 2026-01-10 09:41:12 -03:00