Repository navigation

fix sudoers setup to block privilege escalation - #85

Merged

solsson merged 10 commits into

mainfrom

host-setup-properly

Oct 1, 2026

Merged

fix sudoers setup to block privilege escalation#85
solsson merged 10 commits into
mainfrom
host-setup-properly

Commits on Sep 29, 2026
- y-cluster-sudoers: NOPASSWD rules for root-owned copies of the helpers only
  
  Yolean gle-qa
  and
  claude
  committed
  39a175a
- y-cluster-sudoers: don't exit silently when no grantee owns the source
  
  Yolean gle-qa
  and
  claude
  committed
  026c7dd
- buckety-controller: site-userdata-blobs backend on the local versitygw
  
  Yolean gle-qa
  and
  claude
  committed
  e42843a
- y-bin-dependency-download: a binary appears only when complete
  
  Yolean gle-qa
  and
  claude
  committed
  f2b6d91
- y-etc-hosts-write: accept the route comment k8s-ingress-hosts writes
  
  Yolean gle-qa
  and
  claude
  committed
  4d48d02
Commits on Sep 30, 2026
- y-etc-hosts-write: bounded input, and outside names keep their address
  
  Yolean k8s-qa
  and
  claude
  committed
  6aef3cb
- y-cluster-sudoers: refuse sources a grantee can write, not only own
  
  Yolean k8s-qa
  and
  claude
  committed
  ee9bc6a
- y-etc-hosts-write: compare names outside the block case-insensitively
  
  Yolean k8s-qa
  and
  claude
  committed
  2dcac6c
- y-cluster-sudoers: do not advise running the check as root
  
  Yolean k8s-qa
  and
  claude
  committed
  943bfc4
- Merge pull request #86 from Yolean/host-setup-properly-llm1review
  solsson
  authored
  5aecdea