Enforce File Manager permissions and stop shelling out as root - #83

Merged

jhd3197 merged 12 commits into

mainfrom

Jul 26, 2026

Commits on Jul 26, 2026

fix(deps): unpin postcss override so security patches can resolve

jhd3197
and
claude
committed
2f34ba5
fix(security): prevent command injection via hostname in Postfix install (GHSA-mc93-rc3x-fpgq)

jhd3197
and
tonghuaroot
committed
20e79ff
fix(security): enforce files.write permission on File Manager mutations (GHSA-4wqh-7f4f-5qmx)

jhd3197
and
AruvasgaChithan
committed
6962260
fix(security): enforce files.read on reads; de-shell syslog unit filter
jhd3197
committed
ddf2e94
feat(files): hide File Manager nav when files.read is revoked
jhd3197
committed
e4d35bf
chore: bump version to 1.7.66 [skip ci]
github-actions[bot]
committed
b6f689d
fix(update): harden migration step against boot side-effects and slot venv mismatch
jhd3197
committed
88295ab
fix(files): address PR review — literal grep match, tail clamp, extend RBAC coverage
jhd3197
committed
e3c4fa7
chore: bump version to 1.7.67 [skip ci]
github-actions[bot]
committed
0129d7a
fix(update): integrity probe distinguishes corruption from probe failure
jhd3197
committed
146113b
Merge branch 'dev' of https://github.com/jhd3197/ServerKit into dev
jhd3197
committed
66b3252
chore: bump version to 1.7.68 [skip ci]
github-actions[bot]
committed
27e8004