PapaTramp/security-alert-center
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
233 Commits 1 Branch 0 Tags
c222dd7d41d2d0163e1e9cd95027eea38d809c5f
Commit Graph

122 Commits

Author SHA1 Message Date
PapaTramp c222dd7d41 fix: SSH update log modal shows completion and full tail (v0.5.6) 
Fetch final update_script.log tail after agent-update, update title/message on success, show log by default; auto-close after 30s unchanged.
 2026-07-08 14:26:28 +10:00
PapaTramp b148b558c3 feat: ingest burst hardening — defer lifecycle/auth, workers, nginx (v0.5.5) 
Defer notify_lifecycle and notify_auth_login after commit; SAC_UVICORN_WORKERS via sac-api-start.sh; nginx /api/v1/events timeout; mass-update confirm in Hosts UI.
 2026-07-08 13:16:13 +10:00
PapaTramp 1ad01534f1 fix: remote job stuck after SSH update completes (v0.5.4) 
Treat agent_update_state as source of truth for active job; poll log thread no longer overwrites finished status.
 2026-07-08 12:30:14 +10:00
PapaTramp 9e43de6fc1 chore: release SAC 0.5.0 
Bump version, document security hardening in README, add github snapshot
push script with URL/login/IP sanitization for public mirror.
 2026-07-07 19:44:08 +10:00
PapaTramp 80320ae698 fix: harden SAC security per audit (0.4.15) 
Close audit findings: anti-spoof client IP for login rate limit, JWT/CORS
enforce on startup, SSH host-key verification and sudo via stdin, optional
WinRM HTTPS, SSE httpOnly cookie auth, ingest body limit, ILIKE escaping,
and HMAC API key hashing with legacy SHA-256 fallback.
 2026-07-07 19:32:12 +10:00
PapaTramp 939fe122c5 fix: WinRM RDP bundle staging in %TEMP% (0.4.14) 
Move zip download and extract to user TEMP to avoid ProgramData access denied on DCs. Improve WinRM ERROR line parsing and add optional SAC_AGENT_BUNDLE_BASE_URL for LAN clients.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-06 12:11:54 +10:00
PapaTramp c72e510fb0 fix: defer daily report push и увеличить pool БД (0.4.12) 
FCM/каналы для report.daily.* после commit ingest (BackgroundTasks);
SAC_DB_POOL_SIZE=15, SAC_DB_MAX_OVERFLOW=25 для штурма 09:00.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-06 12:00:37 +10:00
PapaTramp 6c43b8637e fix: dedupe host_silence problems under concurrent scans (0.4.11) 
Treat acknowledged as active, dedupe by hostname, add PostgreSQL advisory lock and a unique index. Migration closes existing duplicate open problems.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-03 09:05:28 +10:00
PapaTramp 3765d4d476 feat: RDP flap auto-disconnect and hide break button after reconnect (0.4.10) 
Add optional auto logoff of stuck sessions on RDG flap and direct RDP failure. Hide the RDS break button on old flap 302 when the user later reconnects or the workstation session is closed.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-02 16:50:03 +10:00
PapaTramp 10ae670962 fix: prevent duplicate host_silence problems per host (0.4.8) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-30 09:12:10 +10:00
PapaTramp daeb7e965d fix: skip alerts for hidden event types, show them on host card (0.4.7) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-29 15:16:10 +10:00
PapaTramp 606bf53019 feat: close workstation login on RDG 303 disconnect (0.4.6) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-26 08:16:06 +10:00
PapaTramp fd1be5e7e4 feat: manual host add from Hosts list via WinRM/SSH (0.4.5) 
Add host button probes Windows by hostname or Linux by IP, registers host in SAC and deploys agent in background.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-25 15:34:12 +10:00
PapaTramp 86fd400f0b fix: reset stale remote agent updates after sac-api restart (0.4.3) 
Clear zombie running jobs on deploy and add admin API to cancel a stuck job.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-25 10:43:31 +10:00
PapaTramp 719d5c5719 feat: login IP whitelist, blocks UI and fail2ban sync (0.4.1) 
Admin settings for web login whitelist, blocked IP list with unblock,
and optional fail2ban ignoreip sync for SSH jail.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-25 10:06:10 +10:00
PapaTramp 0601aafd2d fix: hide ????????? after session terminate (0.3.8) 
Persist session_terminated in event details, expose in API, and update Events/Dashboard UI.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-24 14:45:33 +10:00
PapaTramp 8b3e43f30d fix: event terminate-session 500 on rdp.login.success (0.3.7) 
Use extract_event_actor_user instead of missing ORM field; map WinRM/SSH errors to HTTP 400.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-24 14:37:37 +10:00
PapaTramp 407ef37004 fix: strict RDG 302/303 IP pairing keeps break button visible (0.3.6) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-23 16:30:16 +10:00
PapaTramp 64b942447b fix: reconcile daily report active users count and list (0.3.5) 
Normalize empty-session placeholders; sync stats with report body after ingest.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-23 14:41:47 +10:00
PapaTramp 8b52c5fe3c fix: show RDS break only on active or flap 302 events (0.3.4) 
Hide Obryv RDS on 303 and on 302 after normal session end; keep for open sessions and RDG flap.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 20:15:47 +10:00
PapaTramp fbd213f323 chore: bump npm dompurify and vite for audit fixes (0.3.3) 
dompurify 3.4.11, vite 6.4.3 — npm audit reports 0 vulnerabilities.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 20:13:43 +10:00
PapaTramp 1b96a3b2c7 fix: RDG event label and prefix type filter (0.3.2) 
Use event 302/303 instead of Win302 in RDG titles. Match event types by prefix in events list (e.g. rdg.connection).

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 20:07:22 +10:00
PapaTramp 24ca87a47a feat: RDG 302/303 display path labels and RDS session break (0.3.1) 
Show RDS access via RDG-Comp or Haproxy-RDG-Comp, enable qwinsta/logoff on any RDG event with internal_ip.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 19:52:22 +10:00
PapaTramp 4eb41608ea chore: release SAC 0.3.0 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 16:07:54 +10:00
PapaTramp 6e3f0ede4d fix(backend): loginctl JSON parse and filter ephemeral SSH sessions (0.20.34) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 16:00:02 +10:00
PapaTramp fe818e9946 feat(frontend): terminate session button on Overview recent events (0.20.33) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 15:44:49 +10:00
PapaTramp 5e26834e16 feat(frontend): git agent versions plate on Hosts list (0.20.32) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 15:17:47 +10:00
PapaTramp 54c1d96933 fix(backend): non-login SSH and strict loginctl parse, SSH retry (0.20.31) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 10:54:56 +10:00
PapaTramp fc66b57e78 fix(frontend): match sessions panel height to agent config until loaded (0.20.30) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 10:31:38 +10:00
PapaTramp ad2425b0ff fix(frontend): place host sessions panel beside agent config (0.20.29) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 10:22:20 +10:00
PapaTramp d848d94604 feat: host session list/terminate and event session actions (0.20.28) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 10:13:42 +10:00
PapaTramp ca0255e13b fix(frontend): live refresh Events list via SSE (0.20.27) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 09:11:19 +10:00
PapaTramp d96d9d6333 fix(frontend): remove UTF-8 BOM from package.json — breaks vite build (0.20.26) 
PostCSS config load failed with SyntaxError at position 0 on Linux deploy.
 2026-06-21 20:50:13 +10:00
PapaTramp 7397ec30cd fix(winrm): resolve System32 path for cmd test on minimal PATH (0.20.25) 
WinRM run_cmd(hostname) failed on hosts where System32 is not in PATH.
 2026-06-21 20:49:01 +10:00
PapaTramp bf7c83c408 feat: hide event types from SAC UI via Settings checkbox (0.20.23) 
Per-type «Показывать в событиях» in severity settings; filters lists, dashboard, hosts, and problems.
 2026-06-21 20:13:40 +10:00
PapaTramp 87ac1e09b0 fix: widen remote action log panel and wrap long WinRM output (0.20.22) 2026-06-21 11:30:37 +10:00
PapaTramp 8adaf3bfd3 fix: WinRM update panel no longer blocks SAC navigation (0.20.21) 2026-06-21 11:07:28 +10:00
PapaTramp 8a451a0c49 fix: alembic 022 down_revision must be 021 not 021_agent_git_release (0.20.20) 2026-06-21 11:04:07 +10:00
PapaTramp 5635be1322 feat: background remote agent updates survive SAC navigation (0.20.19) 2026-06-21 11:01:26 +10:00
PapaTramp f3a8952947 fix: friendly 502 handling, 2 uvicorn workers, file bundle cache (0.20.18) 2026-06-20 20:01:46 +10:00
PapaTramp 4d9a9e7e2b fix: decode WinRM Cyrillic from CP866 and show deploy.log UTF-8 (0.20.17) 2026-06-20 19:58:54 +10:00
PapaTramp 9484160045 fix: UTF-8 BOM in RDP bundle zip for Russian Windows PowerShell (0.20.16) 2026-06-20 19:54:12 +10:00
PapaTramp 6acbfe22de fix: deliver RDP bundle via SAC HTTP zip download, not WinRM chunks (0.20.15) 2026-06-20 19:51:45 +10:00
PapaTramp ca90f5c296 fix: SAC pushes RDP bundle from git via WinRM, no client git (0.20.14) 2026-06-20 19:49:20 +10:00
PapaTramp 191fb4e2cf fix: WinRM RDP update only via git clone on client (0.20.13) 2026-06-20 19:46:22 +10:00
PapaTramp 8c1a8fddb1 fix: WinRM RDP update via NETLOGON Deploy, git fallback (0.20.12) 2026-06-20 19:43:34 +10:00
PapaTramp 05408e17c3 fix: WinRM RDP update via run_ps, strip CLIXML noise (0.20.11) 2026-06-20 19:41:05 +10:00
PapaTramp d3517a5706 fix: WinRM RDP update PowerShell quoting via EncodedCommand (0.20.10) 
Broken -Command quotes caused ParserError on remote hosts; run deploy script through base64-encoded PowerShell.
 2026-06-20 19:35:57 +10:00
PapaTramp ec5ec62240 fix: enforce SAC git URL when updating ssh-monitor agents (0.20.8) 
Pass REPO_URL/GIT_BRANCH from agent settings over SSH, preflight git remotes on stale hosts, and stop using GitHub origin on routers.
 2026-06-20 19:28:14 +10:00
PapaTramp 01d72d0f68 fix: show RDG flap badge on 302 and 303 events in SAC UI (0.20.5) 
Seaca surfaced flap via Problems; the web UI only flagged 303 in DB and had
no visible label. Resolve flap pairs at read time and show badge plus qwinsta
on both sides of 302→303.
 2026-06-20 17:27:41 +10:00