mirror of
https://github.com/kuhyx/testsAndMisc.git
synced 2026-11-11 22:54:01 +01:00
Krzysztof kuhy Rudnicki
cffd4587cf
prettier only runs on pre-push, so the split commit passed the per-file gate and then failed the push. Both files stay under the cap. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011w2Pj4Ek3ZNMQVYcFHgXDY
100 lines
2.3 KiB
Markdown
100 lines
2.3 KiB
Markdown
## Part 5: LLM README Files
|
|
|
|
These should be created in the respective directories:
|
|
|
|
### [hosts/guard/README_FOR_LLM.md](to be created)
|
|
|
|
```markdown
|
|
# Hosts Guard System - LLM Reference
|
|
|
|
## Purpose
|
|
|
|
Prevent tampering with /etc/hosts to maintain website blocking.
|
|
|
|
## Architecture
|
|
```
|
|
|
|
/etc/hosts (immutable) ←── canonical (/usr/local/share/locked-hosts)
|
|
↑
|
|
path watcher detects changes
|
|
↓
|
|
enforce-hosts.sh restores
|
|
|
|
````
|
|
|
|
## Critical Files
|
|
| File | Purpose | Protected By |
|
|
|------|---------|--------------|
|
|
| /etc/hosts | Actual hosts file | chattr +i, bind mount |
|
|
| /usr/local/share/locked-hosts | Canonical copy | chattr +i |
|
|
| /etc/hosts.custom-entries.state | Tracks blocked domains | chattr +i |
|
|
|
|
## Commands to Know
|
|
```bash
|
|
# Check protection status
|
|
lsattr /etc/hosts
|
|
systemctl status hosts-guard.path hosts-bind-mount.service
|
|
|
|
# Legitimate edit (with delay)
|
|
sudo /usr/local/sbin/unlock-hosts
|
|
|
|
# Reinstall/repair
|
|
sudo ~/linux-configuration/hosts/install.sh
|
|
sudo ~/linux-configuration/hosts/guard/setup_hosts_guard.sh
|
|
````
|
|
|
|
## DO NOT
|
|
|
|
- Edit /etc/nsswitch.conf (bypasses hosts entirely)
|
|
- Stop hosts-guard.path without understanding consequences
|
|
- Remove entries from install.sh without state file cleanup
|
|
|
|
````
|
|
|
|
### [scripts/periodic_background/digital_wellbeing/pacman/README_FOR_LLM.md](to be created)
|
|
|
|
```markdown
|
|
# Pacman Wrapper - LLM Reference
|
|
|
|
## Purpose
|
|
Intercept pacman to enforce package installation policies.
|
|
|
|
## Architecture
|
|
````
|
|
|
|
/usr/bin/pacman (symlink) → pacman_wrapper.sh
|
|
↓
|
|
/usr/bin/pacman.orig (real)
|
|
|
|
````
|
|
|
|
## Policy Files
|
|
| File | Purpose |
|
|
|------|---------|
|
|
| pacman_blocked_keywords.txt | Substring match = always blocked |
|
|
| pacman_whitelist.txt | Exact names that bypass blocking |
|
|
| pacman_greylist.txt | Requires challenge to install |
|
|
| words.txt | Word scramble challenge source |
|
|
|
|
## Hardcoded Checks (cannot bypass via files)
|
|
- VirtualBox → security challenge + hosts enforcement
|
|
- Steam → weekend-only + word scramble
|
|
|
|
## Integration Points
|
|
1. Hosts guard (pre/post hooks)
|
|
2. Periodic maintenance (auto-setup if missing)
|
|
3. VirtualBox hosts enforcement
|
|
|
|
## Adding Blocks
|
|
```bash
|
|
# Edit the blocked keywords file
|
|
echo "newpackage" >> pacman_blocked_keywords.txt
|
|
|
|
# Re-run installer to update checksums
|
|
sudo ./install_pacman_wrapper.sh
|
|
````
|
|
|
|
```
|
|
|
|
```
|