Tobias GesellchenandClaude Opus 4.8 6c8a50c049 feat(cli): opt-in hardening for setup enable-ssh (--close-17000, --authorized-key) (refs #471) ...

Adds the #471 "secure" steps as opt-in flags on `setup enable-ssh`, off by
default (per the decision that closing 17000 must be opt-in):

- --close-17000: blocks port 17000 from the LAN. Manager.Close17000 remounts /
  read-write, persists an idempotent iptables rule in
  /etc/init.d/Firewalls/update_iptables (keyed on a marker), and applies it
  immediately; loopback access is kept.
- --authorized-key <pubkey>: Manager.InstallAuthorizedKey writes the key to
  /home/root/.ssh/authorized_keys so root SSH no longer relies on the
  empty-password login.

Both run over the SSH the enable step just opened. Default output reminds the
user that 17000 is left open and how to close it. Unit tests cover the
firewall command sequence and the key upload path.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-07 21:11:19 +02:00

..

client

chore(sanitize): remove real device ID and personal LAN IPs from tracked files

2026-06-06 19:11:24 +02:00

config

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

discovery

feat(health): add on-demand DNS-path diagnostics for the #345 speaker-DNS escape

2026-06-03 23:29:15 +02:00

models

fix(client): log unhandled WebSocket event names instead of empty list

2026-06-02 23:00:58 +02:00

service

feat(cli): opt-in hardening for setup enable-ssh (--close-17000, --authorized-key) (refs #471)

2026-06-07 21:11:19 +02:00

speaker

refactor(speaker): introduce pkg/speaker leaf for shared protocol constants

2026-05-11 23:18:08 +02:00

ssh

sec8: document Run() invariant — command must never come from user HTTP input

2026-05-25 21:01:01 +02:00

telnet

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

testutils

fix(ci): gate http-client tests on mock readiness; address semgrep findings (refs #451)

2026-06-06 19:11:24 +02:00