mirror of https://github.com/blakeblackshear/frigate.git synced 2026-09-28 19:06:52 +03:00

Files

T

Josh Hawkins 46c189fced harden against symlink attacks

/config is owned by the unprivileged runtime user after the ownership sweep, so root operations on files there could be redirected by a planted symlink.

- go2rtc HomeKit setup: replace the root yq/jq normalization and chown with an O_NOFOLLOW helper (prepare_homekit.py), so a symlink at go2rtc_homekit.yml can't redirect a root write or chown onto another file
- go2rtc binary override: ignore /config/go2rtc whenever the service runs as root, so a planted binary can't exec as root under FRIGATE_ROOT_SERVICES
- sweep sentinel: read and write it through safe-sentinel, which trusts only a root-owned regular file and never follows a symlink, so it can't be forged to skip the migration or symlinked to clobber a root file
- ownership sweep: chown with -execdir so a parent directory swapped for a symlink mid-walk can't redirect the chown out of the volume
- validate inputs: restrict DEVICE_ACL_PATHS to /dev, require nonzero numeric EXTRA_GROUPS, and reject PUID/PGID that collide with the go2rtc ids
- docs: correct the TLS key ownership note to match what actually happens

2026-08-29 17:26:17 -05:00

data

Implement UI for managing multiple models (#24023 )

2026-08-27 20:30:35 -05:00

docs

harden against symlink attacks

2026-08-29 17:26:17 -05:00

plugins

Miscellaneous fixes (#23648 )

2026-07-07 10:56:43 -06:00

scripts

Implement UI for managing multiple models (#24023 )