snxraven/bare-operating-system
1
1
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Orginize

Browse Source
This commit is contained in:
snxraven
2026-08-18 18:11:34 -04:00
parent bbaf47028f
commit 05dab1f18a
263 changed files with 895 additions and 872 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/audit/PLACEHOLDER_BASELINE.md
+2 -2
View File
@@ -22,10 +22,10 @@ This document classifies incomplete surfaces as of the kernel hardening pass. It
| Item | Location | Resolution |
| ---------------------------- | --------------------------------------------- | ---------- |
| `systemctl` / `journalctl` error-only scripts | `kernel/bin/systemctl`, `kernel/bin/journalctl` | Implemented: call `ctx.bareOsRunSystemctlCli` when present (parity with `curl`). |
| `ssh-keygen` passphrase rejection | `packages/bare-os-booter/lib/ssh-keygen-cli.js` | Implemented: PBKDF2 + ChaCha20-Poly1305 sealed envelope (`bareOsKeySchema: 2`). |
| `ssh-keygen` passphrase rejection | `packages/bare-os-booter/lib/services/ssh-keygen-cli.js` | Implemented: PBKDF2 + ChaCha20-Poly1305 sealed envelope (`bareOsKeySchema: 2`). |
| `basenc` base16-only messaging | `packages/bare-os-coreutils/src/basenc.js` | Implemented: `--base64` / `--base32` (RFC-style) in addition to `--base16`. |
| `hostid` / `users` “stub” UX | `packages/bare-os-coreutils/src/hostid.js`, `users.js` | Implemented: stable hostid from Ed25519 public key when identity unlocked; `users` documents active session. |
| WARC / archive delegates labeled placeholder | `packages/bare-os-booter/lib/host-delegate-registry.js` | Implemented: `warc-cli.js`, `archive-cli.js` (archive maps to ustar `tar`). |
| WARC / archive delegates labeled placeholder | `packages/bare-os-booter/lib/host/host-delegate-registry.js` | Implemented: `warc-cli.js`, `archive-cli.js` (archive maps to ustar `tar`). |
| hrpc / bundlebee / sidecar / pear-runtime-matrix | `host-delegate-registry.js` + `host-bridge-cli.js` | **Implemented:** basename delegates run probe/status/hint/cap CLIs; **`hrpc request`** now uses a functional stock **`ctx.bareOsHrpcRequest`** (validated built-in routes + allowlist) while still permitting host override when **`BARE_OS_HRPC_BRIDGE_WIRED`** is set; env JSON for allowlist / pear matrix probes. |
## P2 — Scripts and documentation