KNEL/football
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: resolve all shellcheck warnings and security issues

Browse Source 
- fix(shellcheck): SC2016 in encryption-setup.sh - remove non-expanding $(blkid...)
- fix(shellcheck): SC1091 in firewall-setup.sh and security-hardening.sh - add disable directives
- security: SSH PasswordAuthentication yes -> no (PRD FR-006 violation)
- fix: date expansion in encryption-validation.sh heredoc
- docs: create SDLC.md with TDD workflow and security requirements
- docs: update AGENTS.md to reference SDLC.md
- chore: update STATUS.md with build completion
- chore: minor build-iso.sh output formatting

All 78 tests pass (63 run, 15 skip for libvirt).
Zero shellcheck warnings.

💘 Generated with Crush

Assisted-by: GLM-5 via Crush <crush@charm.land>
This commit is contained in:
Charles N Wyble
2026-02-17 11:34:11 -05:00
parent 1fee995c3b
commit 0b9ede5f84
10 changed files with 421 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
config/hooks/installed/encryption-validation.sh
View File

@@ -141,10 +141,11 @@ To manage encryption keys (as root):
DOCUMENTATION:
- See /var/backups/keys/README.txt for detailed information
- Review PRD.md for security requirements
Date of installation: $(date)
================================================================================
EOF
# Add installation date after heredoc (variable expansion)
echo "" >> /home/kneluser/ENCRYPTION-PASSPHRASE-REMINDER.txt
echo "Date of installation: $(date)" >> /home/kneluser/ENCRYPTION-PASSPHRASE-REMINDER.txt
chown kneluser:kneluser /home/kneluser/ENCRYPTION-PASSPHRASE-REMINDER.txt
chmod 600 /home/kneluser/ENCRYPTION-PASSPHRASE-REMINDER.txt