mirror of
https://github.com/home-assistant/supervisor.git
synced 2025-11-05 09:00:01 +00:00
1448a33dbf
* Formally deprecate CodeNotary build config * Remove CodeNotary specific integrity checking The current code is specific to how CodeNotary was doing integrity checking. A future integrity checking mechanism likely will work differently (e.g. through EROFS based containers). Remove the current code to make way for a future implementation. * Drop CodeNotary integrity fixups * Drop unused tests * Fix pytest * Fix pytest * Remove CodeNotary related exceptions and handling Remove CodeNotary related exceptions and handling from the Docker interface. * Drop unnecessary comment * Remove Codenotary specific IssueType/SuggestionType * Drop Codenotary specific environment and secret reference * Remove unused constants * Introduce APIGone exception for removed APIs Introduce a new exception class APIGone to indicate that certain API features have been removed and are no longer available. Update the security integrity check endpoint to raise this new exception instead of a generic APIError, providing clearer communication to clients that the feature has been intentionally removed. * Drop content trust A cosign based signature verification will likely be named differently to avoid confusion with existing implementations. For now, remove the content trust option entirely. * Drop code sign test * Remove source_mods/content_trust evaluations * Remove content_trust reference in bootstrap.py * Fix security tests * Drop unused tests * Drop codenotary from schema Since we have "remove extra" in voluptuous, we can remove the codenotary field from the addon schema. * Remove content_trust from tests * Remove content_trust unsupported reason * Remove unnecessary comment * Remove unrelated pytest * Remove unrelated fixtures
56 lines
1.6 KiB
Python
56 lines
1.6 KiB
Python
"""Init file for Supervisor Security RESTful API."""
|
|
|
|
from typing import Any
|
|
|
|
from aiohttp import web
|
|
import voluptuous as vol
|
|
|
|
from supervisor.exceptions import APIGone
|
|
|
|
from ..const import ATTR_FORCE_SECURITY, ATTR_PWNED
|
|
from ..coresys import CoreSysAttributes
|
|
from .utils import api_process, api_validate
|
|
|
|
# pylint: disable=no-value-for-parameter
|
|
SCHEMA_OPTIONS = vol.Schema(
|
|
{
|
|
vol.Optional(ATTR_PWNED): vol.Boolean(),
|
|
vol.Optional(ATTR_FORCE_SECURITY): vol.Boolean(),
|
|
}
|
|
)
|
|
|
|
|
|
class APISecurity(CoreSysAttributes):
|
|
"""Handle RESTful API for Security functions."""
|
|
|
|
@api_process
|
|
async def info(self, request: web.Request) -> dict[str, Any]:
|
|
"""Return Security information."""
|
|
return {
|
|
ATTR_PWNED: self.sys_security.pwned,
|
|
ATTR_FORCE_SECURITY: self.sys_security.force,
|
|
}
|
|
|
|
@api_process
|
|
async def options(self, request: web.Request) -> None:
|
|
"""Set options for Security."""
|
|
body = await api_validate(SCHEMA_OPTIONS, request)
|
|
|
|
if ATTR_PWNED in body:
|
|
self.sys_security.pwned = body[ATTR_PWNED]
|
|
if ATTR_FORCE_SECURITY in body:
|
|
self.sys_security.force = body[ATTR_FORCE_SECURITY]
|
|
|
|
await self.sys_security.save_data()
|
|
|
|
await self.sys_resolution.evaluate.evaluate_system()
|
|
|
|
@api_process
|
|
async def integrity_check(self, request: web.Request) -> dict[str, Any]:
|
|
"""Run backend integrity check.
|
|
|
|
CodeNotary integrity checking has been removed. This endpoint now returns
|
|
an error indicating the feature is gone.
|
|
"""
|
|
raise APIGone("Integrity check feature has been removed.")
|