Mark local-trust tighten done

This commit is contained in:
Ty
2026-09-26 17:41:09 +00:00
parent a2ecf1f766
commit 18a7779da2
+2 -1
View File
@@ -10,7 +10,8 @@
- [x] Gatekeeper: two firewall rules (allow Regis `100.64.0.6` to `100.64.0.1:8787`, block everyone else on that bind) - [x] Gatekeeper: two firewall rules (allow Regis `100.64.0.6` to `100.64.0.1:8787`, block everyone else on that bind)
- [x] CoS forwarder under `\VeriPath\Hermes_WebUI` (`regis-forward.py`) - [x] CoS forwarder under `\VeriPath\Hermes_WebUI` (`regis-forward.py`)
- [x] Regis `/health` 200 from `100.64.0.6` - [x] Regis `/health` 200 from `100.64.0.6`
- [ ] Tighten: forwarder connections must not get localhost terminal / first-password privileges - [x] Tighten: forwarder connections are not localhost-privileged (`127.0.0.2` + `server.py` patch)
- [ ] Watch: re-apply `server.py` patch after any hermes-webui update, or forwarder stops
- [ ] Later: drop Leonard off admin / Highest if it can be done without another Gatekeeper prompt - [ ] Later: drop Leonard off admin / Highest if it can be done without another Gatekeeper prompt
- [ ] Later: existing `python.exe` allow-everything firewall rules - [ ] Later: existing `python.exe` allow-everything firewall rules