Fix/confd hardening - #1659

Draft

mattiaswal wants to merge 8 commits into

mainfrom

fix/confd-hardening

Commits on Sep 26, 2026

confd: restrict hardware component name to a safe character set
mattiaswal
committed
b04c39e
confd: drop shell expansion characters from container command
mattiaswal
committed
3c2febd
confd: deny writing /system/advanced by default
mattiaswal
committed
bdf2032
confd: constrain DHCP server static-host match strings
mattiaswal
committed
660287a
confd: constrain syslog property-filter value and pattern-match
mattiaswal
committed
f0eb108
confd: restrict keystore key and certificate names
mattiaswal
committed
c03e6ed
confd: subscribe to ietf-syslog so changes apply at runtime
mattiaswal
committed
8b2a56f
confd: constrain Wi-Fi mesh-id, NAS identifier, and AP/mesh passphrases
mattiaswal
committed
1865b23