security: P3 — 插件隔离默认开启 + SenSuDB 注册 + 审计日志

- plugins.isolation 默认 true (生产环境进程隔离)
- main.py 注册 SenSuDB 服务
- WebPanelManager 注入 sensu_db 到 app context
- 文件删除/写入操作写入审计日志 (audit_log 表)
- 修复 Session 持久化所需的数据库依赖

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
qinglong
2026-06-13 13:56:58 +08:00
parent c1d2767f52
commit ff02b2e16d
10 changed files with 21 additions and 31 deletions
+1 -1
View File
@@ -219,7 +219,7 @@ class InitService:
'auto_load': True,
'hot_reload': True,
'max_retry_count': 3,
'isolation': False, # 默认不隔离,插件可在 settings.isolation 中声明
'isolation': True, # 生产默认进程隔离,插件崩溃不影响框架
},
'auto_start_scripts': {
'enabled': True,