GithubBackup/IP-Sentinel
1
0
Fork 0
mirror of https://github.com/hotyue/IP-Sentinel.git synced 2026-07-07 02:51:22 +08:00
Code Issues Packages Projects Releases Wiki Activity

refactor(agent): 🛡️ 终极安全重构 - 阻断 FD 文件锁继承导致的任务死锁，并将深海声呐探针收编本地化执行，彻底铲除第三方 RCE 投毒风险

Browse Source
This commit is contained in:
hotyue
2026-04-24 10:28:38 +00:00
parent 8d16c549fc
commit 2c50c72fcb
2 changed files with 13 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
core/runner.sh
View File

@@ -91,7 +91,8 @@ fi
if [ -n "$TARGET_MOD" ] && [ -x "${INSTALL_DIR}/core/${TARGET_MOD}" ]; then
log "SYSTEM" "INFO" "命中触发条件，加载并执行子模块: ${MOD_NAME}"
# 核心降耗逻辑：使用 nice -n 19 赋予进程最低 CPU 优先级，绝不抢占 VPS 正常业务的资源
nice -n 19 bash "${INSTALL_DIR}/core/${TARGET_MOD}"
# [安全修复] 注入 200>&-，强行关闭子进程对排他锁的继承权！防止子进程假死导致全局死锁
nice -n 19 bash "${INSTALL_DIR}/core/${TARGET_MOD}" 200>&-
else
log "SYSTEM" "ERROR" "配置了模块 ${MOD_NAME}，但未找到对应的可执行脚本: ${TARGET_MOD}"
fi