vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

docs(security): drop redundant bootstrap-container allowlist entry

Browse source 
The hive-priv container allowlist's explicit MANAGER_NAME allow is
redundant — the bootstrap container's name passes the generic
agent-name char validation anyway. Describe the allowlist as just the
agent-name convention + the sibling service containers.
This commit is contained in:
iris 2026-06-23 13:52:56 +02:00 • committed by mara
commit 80c33f5108
1 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
docs/security.md
View file

@ -109,10 +109,10 @@ known operations; there is no arbitrary command pass-through:
| `RestartMatrixDaemon` | `systemctl --machine=h-<name> restart hive-matrix-daemon.service` | | `RestartMatrixDaemon` | `systemctl --machine=h-<name> restart hive-matrix-daemon.service` |
**Container allowlist** — every request is validated against an **Container allowlist** — every request is validated against an
allowlist before any operation: only names matching `h-<agent>` (the allowlist before any operation: only names matching the agent-name
standard agent prefix), the root/bootstrap container, or the known sibling convention (char-validated) or the known sibling service containers
service containers (`hive-gateway`, `hive-forge`, `hive-matrix`, (`hive-gateway`, `hive-forge`, `hive-matrix`, `hive-ci`) are accepted.
`hive-ci`) are accepted. Arbitrary container names are rejected. Arbitrary container names are rejected.
**Socket-activated** — systemd starts `hive-priv` on the first **Socket-activated** — systemd starts `hive-priv` on the first
incoming connection (`LISTEN_FDS=1`); it is not running between calls. incoming connection (`LISTEN_FDS=1`); it is not running between calls.