catborise 7286ba079d fix(gstfsd): random password salt, timeouts, loopback-only daemon ... - Hash the root password with a random SHA-512 salt instead of the fixed "$6$kgPoiREy". - Talk to gstfsd through one helper with a 120 s socket timeout; an unreachable daemon or a bad reply is an error message, not a 500. - gstfsd refuses to listen on a non-loopback address unless GSTFSD_ALLOW_REMOTE=1: it is an unauthenticated root service. - gstfsd: encode replies (sendall(str) raised TypeError on Python 3, so the success path never worked) and use octal chmod modes. - README: what gstfsd does and how to allow it on a remote compute.		2026-10-02 22:52:09 +03:00
..
api	fix(reconciliation): serialize compute sync and enforce UUID identity	2026-09-28 14:55:49 +03:00
fixtures	Instances overhaul	2020-07-13 15:33:09 +06:00
migrations	fix(reconciliation): serialize compute sync and enforce UUID identity	2026-09-28 14:55:49 +03:00
templates	fix: serve compute JSON endpoints as application/json, build chipset list safely	2026-10-02 22:34:05 +03:00
templatetags	lint with black python. convert f style strings to old one. some small fixes	2020-11-05 12:34:31 +03:00
__init__.py	Fixe migrations for new deployments	2020-05-28 18:19:25 +06:00
apps.py	format python code with black	2022-11-02 08:54:35 +03:00
forms.py	Corrected untranslated items	2023-12-13 14:00:02 +08:00
models.py	fix(reconciliation): serialize compute sync and enforce UUID identity	2026-09-28 14:55:49 +03:00
test_clone_permission.py	fix(instances): require change permission to clone and stop trusting clone POST data	2026-10-02 19:07:53 +03:00
test_console_rule.py	fix: add an authorization matrix test and close the endpoints it finds	2026-10-02 20:33:12 +03:00
test_console_settings_access.py	fix(instances): show console settings and the VNC password only to console managers	2026-10-02 22:04:05 +03:00
test_create_instance.py	fix(instances): guard mutations and refresh lists after sync	2026-09-28 14:56:19 +03:00
test_disk_isolation.py	fix(instances): edit_volume bus change and format, full-string validation	2026-10-02 22:31:25 +03:00
test_gstfsd.py	fix(gstfsd): random password salt, timeouts, loopback-only daemon	2026-10-02 22:52:09 +03:00
test_index.py	fix(instances): guard mutations and refresh lists after sync	2026-09-28 14:56:19 +03:00
test_root_pass.py	fix(gstfsd): random password salt, timeouts, loopback-only daemon	2026-10-02 22:52:09 +03:00
test_security_mutations.py	fix(instances): restrict disk views to superusers and validate disk input	2026-10-02 17:11:12 +03:00
test_template_flag.py	fix(instances): only superusers and staff may change the template flag	2026-10-02 22:13:46 +03:00
test_xss.py	fix: serve compute JSON endpoints as application/json, build chipset list safely	2026-10-02 22:34:05 +03:00
tests.py	fix: add an authorization matrix test and close the endpoints it finds	2026-10-02 20:33:12 +03:00
urls.py	fix: add an authorization matrix test and close the endpoints it finds	2026-10-02 20:33:12 +03:00
utils.py	Merge branch 'fix/wave0-staff-console-password' into wave0-integration	2026-10-02 22:14:40 +03:00
views.py	fix(gstfsd): random password salt, timeouts, loopback-only daemon	2026-10-02 22:52:09 +03:00