18 Commits
Author SHA1 Message Date
RoyandGitHub 84590cdcee Refactor sudo password handling in installer script 2026-07-18 04:23:03 -07:00
AaronandClaude Opus 4.8 ec7bfcd956 feat: harden downloads, deletes, debug tracing, and sudo handling
Security hardening, all backward-compatible (opt-in via NSL_* env vars):

- Downloads: add nsl_download() and route the launcher-installer and EA
  downloads through it. Refuses non-HTTPS URLs and supports optional
  SHA-256 verification (removes the file on mismatch so a tampered or
  partial download is never run).
- Deletes: add nsl_safe_rm() (allowlisted paths, refuses empty / "/" /
  $HOME) and route the download-dir and scanner/service/env_vars deletes
  through it. Replace Start Fresh's unbounded delete_path with an
  allowlisted version so a bad variable expansion can't wipe unrelated
  data.
- Debug tracing: gate 'set -x' behind NSL_DEBUG (default off) so the log
  no longer echoes every expanded value (paths, tokens) by default.
- Dry run: NSL_DRY_RUN=1 previews destructive actions (deletes, Start
  Fresh) without performing them.
- Start Fresh: require NSL_CONFIRM_START_FRESH=1 for the non-interactive
  (CLI) path so an accidental/automated arg can't silently wipe.
- Decky installer: use sudo's own credential handling (sudo -v / sudo)
  instead of capturing the password via zenity and piping it to 'sudo -S'
  (which exposes it via argv/process listings).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-01 16:51:12 -04:00
RoyandGitHub 983ac18514 Remove unnecessary systemctl commands
Removed systemctl commands for daemon reload and restart.
2026-05-29 00:49:13 -07:00
RoyandGitHub dff6045347 Reload and restart plugin_loader after installation
Added systemctl commands to reload and restart plugin_loader after installation.
2026-05-28 22:58:26 -07:00
RoyandGitHub 0fd2efdd34 Fix GITHUB_URL in NSLPluginInstaller.sh
Release Please / release-please (push) Has been cancelled
2025-11-16 06:16:39 -08:00
RoyandGitHub 153bac5f82 Update NSLPluginInstaller.sh
Release Please / release-please (push) Has been cancelled
2025-07-29 02:52:01 -07:00
RoyandGitHub 97c7c75a7d Update NSLPluginInstaller.sh 2025-05-27 12:40:58 -07:00
RoyandGitHub aa07f7e060 Update NSLPluginInstaller.sh 2025-04-23 04:21:29 -07:00
RoyandGitHub bdd4186c54 Update NSLPluginInstaller.sh 2025-04-23 04:13:11 -07:00
RoyandGitHub 90dc8c5bdd Update NSLPluginInstaller.sh 2025-04-23 03:55:49 -07:00
RoyandGitHub 5822cf0705 fixed check update logic 2025-01-11 19:36:05 -08:00
RoyandGitHub b107c5b5fe better messages
Release Please / release-please (push) Has been cancelled
2024-12-27 04:07:01 -08:00
RoyandGitHub d4c725e87e Update NSLPluginInstaller.sh
Release Please / release-please (push) Waiting to run
2024-10-25 03:30:26 -07:00
RoyandGitHub 43034167e8 Update NSLPluginInstaller.sh 2024-10-21 02:34:39 -07:00
RoyandGitHub 9d78ebc396 Update NSLPluginInstaller.sh 2024-10-21 02:26:31 -07:00
RoyandGitHub 53103f8aac Update NSLPluginInstaller.sh 2024-10-17 22:46:48 -07:00
RoyandGitHub 78938fe1d2 Update NSLPluginInstaller.sh 2024-10-17 22:32:29 -07:00
RoyandGitHub 81939aedfe Add files via upload 2024-10-17 22:31:51 -07:00