iamdoubz 8d5475cfbf security: fix the review leftovers (owner, 08 §6) ...

- Asterisk doesn't load app_system, func_shell, app_disa, res_agi, app_externalivr.
- Turning two-step sign-in on asks for the password again.
- *97/*98: one voicemail login at a time per phone, 10 an hour (sp-sub-vmlimit).
- /prov: an unknown MAC gets the same 401 as a known one.
- The login limiter sweeps keys past every window.
Also the v1 checklist with the owner's results from 2026-10-21.

2026-10-21 10:54:44 -05:00

..

conf

security: fix the review leftovers (owner, 08 §6)

2026-10-21 10:54:44 -05:00

Dockerfile

security: headers, phone ACL, PIN rules for PINs set from the phone

2026-10-19 14:47:04 -05:00

entrypoint.sh

asterisk: 24.0.0-rc2 image built from source with static config

2026-10-17 14:31:05 -05:00

sp-vm-pincheck

security: headers, phone ACL, PIN rules for PINs set from the phone

2026-10-19 14:47:04 -05:00