4 Commits

Author	SHA1	Message	Date
Knienartowicz	be17b3077e	fix(updates): harden Go binary rebuild version and backup path ... Prefer console-local VERSION/package.json for ldflags so a stale root-owned /opt/VERSION cannot pin rebuilt binaries to an old semver. Fall back binary backups to a writable data dir when /opt/rustdesk denies bak writes (EACCES). Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow)	2026-09-18 10:18:35 +02:00
UNITRONIX	f64fbbb354	fix(security): finish privileged update path and relay auth tests ... Wire the allowlisted privileged-update helper into panel/update scripts, tighten chat/remote relay checks, and add deviceAuth/update helper coverage. Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow)	2026-08-15 23:29:01 +02:00
UNITRONIX	fecb680d6d	fix(linux): self-bootstrap panel update sudoers during deploy ... Whitelist linux-ensure-console-user.js in sudoers, invoke it via passwordless sudo from the update module, refresh sudoers after privileged server deploy, and align betterdesk.sh repair paths so systemd unit helpers apply without a manual root step.	2026-06-26 23:53:06 +02:00
UNITRONIX	87b0b21b0b	fix(update): privileged Go server binary deploy from Linux panel ... Hardened installs could not replace betterdesk-server in /opt/rustdesk from Settings → Updates. Add a validated sudo deploy helper, extend console update sudoers, and sync privileges before server deploy. Fixes #183	2026-06-09 01:09:11 +02:00