security: P3 — 插件隔离默认开启 + SenSuDB 注册 + 审计日志

- plugins.isolation 默认 true (生产环境进程隔离)
- main.py 注册 SenSuDB 服务
- WebPanelManager 注入 sensu_db 到 app context
- 文件删除/写入操作写入审计日志 (audit_log 表)
- 修复 Session 持久化所需的数据库依赖

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
qinglong
2026-06-13 13:56:58 +08:00
parent c1d2767f52
commit ff02b2e16d
10 changed files with 21 additions and 31 deletions
+6 -1
View File
@@ -11,6 +11,7 @@ from services.project_engine import ProjectEngine
from services.pyenv_manager import PyEnvManager
from services.proxy_service import ProxyService
from services.web_panel.utils.system_info import SystemInfoCollector
from services.sensu_db import SenSuDB
import os
from pathlib import Path
@@ -63,7 +64,11 @@ class SenSuFramework:
# 2.5 自动启动脚本 (日志服务就绪后)
await init_service.start_auto_scripts()
# 2.6 系统信息采集器 (共享实例,TUI + Web面板共用)
# 2.6 数据库 (持久化层)
sensu_db = SenSuDB()
self.service_manager.register_service("sensu_db", sensu_db)
# 2.7 系统信息采集器 (共享实例,TUI + Web面板共用)
sys_collector = SystemInfoCollector()
self.service_manager.register_service("sys_collector", sys_collector)