security: P3 — 插件隔离默认开启 + SenSuDB 注册 + 审计日志

- plugins.isolation 默认 true (生产环境进程隔离)
- main.py 注册 SenSuDB 服务
- WebPanelManager 注入 sensu_db 到 app context
- 文件删除/写入操作写入审计日志 (audit_log 表)
- 修复 Session 持久化所需的数据库依赖

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
qinglong
2026-06-13 13:56:58 +08:00
parent c1d2767f52
commit ff02b2e16d
10 changed files with 21 additions and 31 deletions
+3 -14
View File
@@ -9,10 +9,6 @@ commands:
permissions:
- framework.scaffold.plugin
source: internal
echo: &id001
description: echo input
permissions: []
source: plugin.example_plugin
help:
description: 显示帮助信息
permissions:
@@ -38,10 +34,6 @@ commands:
permissions:
- framework.permission.read
source: internal
plugin_status: &id002
description: show status
permissions: []
source: plugin.example_plugin
pm_plugin_status:
description: '权限管理: 查看插件权限状态'
permissions:
@@ -97,9 +89,6 @@ commands:
permissions:
- framework.command.test
source: internal
last_updated: 12019.862122705
plugin_commands:
example_plugin:
echo: *id001
plugin_status: *id002
total_commands: 20
last_updated: 12161.390698641
plugin_commands: {}
total_commands: 18