Commit Graph

7 Commits

Author SHA1 Message Date
copilot-swe-agent[bot]
5640de85e9 Restore netalertx/ folder and fix daily_README workflow rename collision
Commit 734a824 was triggered by the daily_README.yaml workflow which
temporarily renames addon folders to their .name for README generation.
Both netalertx and netalertx_fa share name: NetAlertX, causing mv to
move netalertx inside the already-renamed netalertx_fa directory.

Fix: add [ ! -e "$NAME" ] guard to prevent rename when target exists.

Co-authored-by: alexbelgium <44178713+alexbelgium@users.noreply.github.com>
Agent-Logs-Url: https://github.com/alexbelgium/hassio-addons/sessions/b23b6b99-d4da-4c4e-926f-4067af6f16a0
2026-03-20 19:27:26 +00:00
github-actions
734a824547 GitHub bot : README updated 2026-03-20 17:14:34 +00:00
Alexandre
f3af043ed2 build 2026-03-19 20:39:32 +01:00
github-actions
d46fb70c20 GitHub bot : README updated 2026-03-19 17:21:27 +00:00
copilot-swe-agent[bot]
3c53e69161 Replace blanket capability, with specific capabilities in all AppArmor profiles
Remove overly permissive blanket `capability,` rule (grants ALL Linux
capabilities) from 107 addon AppArmor profiles. Replace with only the
specific capabilities each addon needs based on its config.yaml
`privileged` field.

Base capabilities for all addons: setuid, setgid, chown, fowner, dac_override
Additional capabilities mapped from config.yaml privileged list:
- SYS_ADMIN -> sys_admin
- DAC_READ_SEARCH -> dac_read_search
- NET_ADMIN -> net_admin
- NET_RAW -> net_raw
- SYS_RAWIO -> sys_rawio
- SYS_TIME -> sys_time
- SYS_RESOURCE -> sys_resource

Addons with full_access: true (portainer_agent) retain blanket capability.

Co-authored-by: alexbelgium <44178713+alexbelgium@users.noreply.github.com>
2026-03-17 07:42:05 +00:00
root
1ebaf6e011 Update with proper configuration 2026-03-16 15:04:32 -04:00
jokob-sk
c6247fb7fb initial commit 2025-01-05 13:04:36 +11:00