PapaTramp/security-alert-center
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
219 Commits 1 Branch 0 Tags
c72e510fb0d0aa29dd2886c5b1d90d21687d225e
Commit Graph

116 Commits

Author SHA1 Message Date
PTah c72e510fb0 fix: defer daily report push и увеличить pool БД (0.4.12) 
FCM/каналы для report.daily.* после commit ingest (BackgroundTasks);
SAC_DB_POOL_SIZE=15, SAC_DB_MAX_OVERFLOW=25 для штурма 09:00.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-06 12:00:37 +10:00
PTah 6c43b8637e fix: dedupe host_silence problems under concurrent scans (0.4.11) 
Treat acknowledged as active, dedupe by hostname, add PostgreSQL advisory lock and a unique index. Migration closes existing duplicate open problems.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-03 09:05:28 +10:00
PTah 3765d4d476 feat: RDP flap auto-disconnect and hide break button after reconnect (0.4.10) 
Add optional auto logoff of stuck sessions on RDG flap and direct RDP failure. Hide the RDS break button on old flap 302 when the user later reconnects or the workstation session is closed.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-02 16:50:03 +10:00
PTah 10ae670962 fix: prevent duplicate host_silence problems per host (0.4.8) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-30 09:12:10 +10:00
PTah daeb7e965d fix: skip alerts for hidden event types, show them on host card (0.4.7) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-29 15:16:10 +10:00
PTah 606bf53019 feat: close workstation login on RDG 303 disconnect (0.4.6) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-26 08:16:06 +10:00
PTah fd1be5e7e4 feat: manual host add from Hosts list via WinRM/SSH (0.4.5) 
Add host button probes Windows by hostname or Linux by IP, registers host in SAC and deploys agent in background.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-25 15:34:12 +10:00
PTah 86fd400f0b fix: reset stale remote agent updates after sac-api restart (0.4.3) 
Clear zombie running jobs on deploy and add admin API to cancel a stuck job.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-25 10:43:31 +10:00
PTah 719d5c5719 feat: login IP whitelist, blocks UI and fail2ban sync (0.4.1) 
Admin settings for web login whitelist, blocked IP list with unblock,
and optional fail2ban ignoreip sync for SSH jail.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-25 10:06:10 +10:00
PTah 0601aafd2d fix: hide ????????? after session terminate (0.3.8) 
Persist session_terminated in event details, expose in API, and update Events/Dashboard UI.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-24 14:45:33 +10:00
PTah 8b3e43f30d fix: event terminate-session 500 on rdp.login.success (0.3.7) 
Use extract_event_actor_user instead of missing ORM field; map WinRM/SSH errors to HTTP 400.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-24 14:37:37 +10:00
PTah 407ef37004 fix: strict RDG 302/303 IP pairing keeps break button visible (0.3.6) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-23 16:30:16 +10:00
PTah 64b942447b fix: reconcile daily report active users count and list (0.3.5) 
Normalize empty-session placeholders; sync stats with report body after ingest.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-23 14:41:47 +10:00
PTah 8b52c5fe3c fix: show RDS break only on active or flap 302 events (0.3.4) 
Hide Obryv RDS on 303 and on 302 after normal session end; keep for open sessions and RDG flap.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 20:15:47 +10:00
PTah fbd213f323 chore: bump npm dompurify and vite for audit fixes (0.3.3) 
dompurify 3.4.11, vite 6.4.3 — npm audit reports 0 vulnerabilities.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 20:13:43 +10:00
PTah 1b96a3b2c7 fix: RDG event label and prefix type filter (0.3.2) 
Use event 302/303 instead of Win302 in RDG titles. Match event types by prefix in events list (e.g. rdg.connection).

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 20:07:22 +10:00
PTah 24ca87a47a feat: RDG 302/303 display path labels and RDS session break (0.3.1) 
Show RDS access via RDG-Comp or Haproxy-RDG-Comp, enable qwinsta/logoff on any RDG event with internal_ip.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 19:52:22 +10:00
PTah 4eb41608ea chore: release SAC 0.3.0 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 16:07:54 +10:00
PTah 6e3f0ede4d fix(backend): loginctl JSON parse and filter ephemeral SSH sessions (0.20.34) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 16:00:02 +10:00
PTah fe818e9946 feat(frontend): terminate session button on Overview recent events (0.20.33) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 15:44:49 +10:00
PTah 5e26834e16 feat(frontend): git agent versions plate on Hosts list (0.20.32) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 15:17:47 +10:00
PTah 54c1d96933 fix(backend): non-login SSH and strict loginctl parse, SSH retry (0.20.31) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 10:54:56 +10:00
PTah fc66b57e78 fix(frontend): match sessions panel height to agent config until loaded (0.20.30) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 10:31:38 +10:00
PTah ad2425b0ff fix(frontend): place host sessions panel beside agent config (0.20.29) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 10:22:20 +10:00
PTah d848d94604 feat: host session list/terminate and event session actions (0.20.28) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 10:13:42 +10:00
PTah ca0255e13b fix(frontend): live refresh Events list via SSE (0.20.27) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 09:11:19 +10:00
PTah d96d9d6333 fix(frontend): remove UTF-8 BOM from package.json — breaks vite build (0.20.26) 
PostCSS config load failed with SyntaxError at position 0 on Linux deploy.
 2026-06-21 20:50:13 +10:00
PTah 7397ec30cd fix(winrm): resolve System32 path for cmd test on minimal PATH (0.20.25) 
WinRM run_cmd(hostname) failed on hosts where System32 is not in PATH.
 2026-06-21 20:49:01 +10:00
PTah bf7c83c408 feat: hide event types from SAC UI via Settings checkbox (0.20.23) 
Per-type «Показывать в событиях» in severity settings; filters lists, dashboard, hosts, and problems.
 2026-06-21 20:13:40 +10:00
PTah 87ac1e09b0 fix: widen remote action log panel and wrap long WinRM output (0.20.22) 2026-06-21 11:30:37 +10:00
PTah 8adaf3bfd3 fix: WinRM update panel no longer blocks SAC navigation (0.20.21) 2026-06-21 11:07:28 +10:00
PTah 8a451a0c49 fix: alembic 022 down_revision must be 021 not 021_agent_git_release (0.20.20) 2026-06-21 11:04:07 +10:00
PTah 5635be1322 feat: background remote agent updates survive SAC navigation (0.20.19) 2026-06-21 11:01:26 +10:00
PTah f3a8952947 fix: friendly 502 handling, 2 uvicorn workers, file bundle cache (0.20.18) 2026-06-20 20:01:46 +10:00
PTah 4d9a9e7e2b fix: decode WinRM Cyrillic from CP866 and show deploy.log UTF-8 (0.20.17) 2026-06-20 19:58:54 +10:00
PTah 9484160045 fix: UTF-8 BOM in RDP bundle zip for Russian Windows PowerShell (0.20.16) 2026-06-20 19:54:12 +10:00
PTah 6acbfe22de fix: deliver RDP bundle via SAC HTTP zip download, not WinRM chunks (0.20.15) 2026-06-20 19:51:45 +10:00
PTah ca90f5c296 fix: SAC pushes RDP bundle from git via WinRM, no client git (0.20.14) 2026-06-20 19:49:20 +10:00
PTah 191fb4e2cf fix: WinRM RDP update only via git clone on client (0.20.13) 2026-06-20 19:46:22 +10:00
PTah 8c1a8fddb1 fix: WinRM RDP update via NETLOGON Deploy, git fallback (0.20.12) 2026-06-20 19:43:34 +10:00
PTah 05408e17c3 fix: WinRM RDP update via run_ps, strip CLIXML noise (0.20.11) 2026-06-20 19:41:05 +10:00
PTah d3517a5706 fix: WinRM RDP update PowerShell quoting via EncodedCommand (0.20.10) 
Broken -Command quotes caused ParserError on remote hosts; run deploy script through base64-encoded PowerShell.
 2026-06-20 19:35:57 +10:00
PTah ec5ec62240 fix: enforce SAC git URL when updating ssh-monitor agents (0.20.8) 
Pass REPO_URL/GIT_BRANCH from agent settings over SSH, preflight git remotes on stale hosts, and stop using GitHub origin on routers.
 2026-06-20 19:28:14 +10:00
PTah 01d72d0f68 fix: show RDG flap badge on 302 and 303 events in SAC UI (0.20.5) 
Seaca surfaced flap via Problems; the web UI only flagged 303 in DB and had
no visible label. Resolve flap pairs at read time and show badge plus qwinsta
on both sides of 302→303.
 2026-06-20 17:27:41 +10:00
PTah c21043d845 feat: bootstrap ssh-monitor updater when missing on host (0.20.2) 
SAC now clones the ssh-monitor repo and installs update_ssh_monitor.sh before running the update when the remote updater script is absent.
 2026-06-20 17:01:06 +10:00
PTah 07b97bd111 fix: inline git test feedback and use form URLs (0.20.1) 
Show git check result next to the button, scroll into view, and test unsaved repo URLs from the form.
 2026-06-20 16:29:48 +10:00
PTah f411d8f070 feat: git-based agent version reference and unified outdated badge (0.20.0) 
SAC reads latest RDP/ssh-monitor versions from configured git repos for outdated detection, update targets, and settings test-git.
 2026-06-20 16:25:53 +10:00
PTah d820d941c1 fix: hide SSH/WinRM test feedback after 30s (0.12.1) 
WinRM success message now auto-hides like SSH; both use 30 second timeout instead of 60.
 2026-06-20 15:57:15 +10:00
PTah cd2f27792d feat: agent updates from SAC, poll config, SSH/WinRM fallback (0.12.0) 
Add agent update settings, pending self-update via poll, desired config per host, and automatic or manual SSH/WinRM fallback when agents do not report agent.update events.
 2026-06-20 15:52:10 +10:00
PTah 75f4c475df feat: RDG qwinsta/logoff via WinRM on client workstation (0.11.6) 
SAC resolves internal_ip to a registered Windows host and runs qwinsta/logoff synchronously over WinRM instead of queueing commands to the gateway agent.
 2026-06-20 15:36:12 +10:00