luna/enodia-sentinal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Expand TUI and package recovery planning

Browse source
This commit is contained in:
Luna 2026-07-09 05:51:59 -07:00
parent cab60cd633
commit 51d52b5229
No known key found for this signature in database
10 changed files with 511 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

20
enodia_sentinel/respond.py
View file

@ -155,12 +155,30 @@ def build_plan(bundle: dict, cfg: Config) -> dict:
add(ResponseAction(
id="",
category="recovery",
title=f"Restore package-owned file {path}",
title=f"Identify package owner for {path}",
command=("pacman", "-Qo", path),
reason="Identify the owning package before reinstalling it from trusted media.",
risk="low",
targets={"path": path},
))
add(ResponseAction(
id="",
category="recovery",
title=f"Reinstall owner of {path} from trusted package media",
command=("pacman", "-S", "--overwrite", "*", "<package>"),
reason="After pacman -Qo identifies the owner, reinstall that package from a trusted, signature-verified source.",
risk="high",
targets={"path": path, "package": "<package>"},
))
add(ResponseAction(
id="",
category="recovery",
title=f"Re-anchor integrity after restoring {path}",
command=("enodia-sentinel", "fim-update"),
reason="Refresh the FIM baseline only after the operator verifies the restored file is legitimate.",
risk="medium",
targets={"path": path},
))
if {"fim_modified", "fim_pkg_modified", "pkg_signature_mismatch",
"pkgdb_tamper"} & sigs: