3 Commits

Author	SHA1	Message	Date
Krzysztof kuhy Rudnicki	b96f6801b6	security: harden digital-wellbeing bypass vectors ... - Screen locker: disable VT switching (Ctrl+Alt+Fn) via setxkbmap srvrkeys:none on startup; restore on close (production mode only). Gracefully skips if setxkbmap is not installed (shutil.which). Tests: 7 new tests, 100% branch coverage maintained. - Midnight shutdown: restore real schedule values (Mon-Wed 21:00, Thu-Sun 22:00, morning end 05:00); re-enable the three commented-out leniency checks in check_schedule_protection(); self-lock script with chattr +i at end of enable_midnight_shutdown(). - Hosts install: add UNBLOCK_STATE_FILE tracking for whitelisted domains; check_unblock_entries_protection() blocks installation if the unblock list grows; save state after install; self-lock install.sh and generate_hosts_file.sh with chattr +i.	2026-05-16 15:41:40 +02:00
Krzysztof kuhy Rudnicki	765fa92543	Add install_core_system.sh; remove pc_startup and thesis_tracker ... - Add linux_configuration/scripts/single_use/install_core_system.sh: unified installer for core modules (workout locker, hosts, shutdown timer) plus optional secondary modules (steam enforcer, pacman wrapper, i3 config, compulsive block, focus daemon) - git rm pc_startup_visual_status.sh, setup_pc_startup_monitor.sh, thesis_work_tracker.sh, thesis_work_status.sh, setup_thesis_work_tracker.sh, README_THESIS_TRACKER.md, systemd/thesis-work-tracker@.service, and their two test files - Remove now-dead setup_pc_startup_monitor.sh call from fresh-install/main.sh	2026-05-15 01:13:28 +02:00
Krzysztof kuhy Rudnicki	42a66a1419	refactor(linux_configuration/scripts): split all scripts into single_use/ and periodic_background/ ... - Move all linux_configuration scripts into two semantic categories: - single_use/: scripts run once manually (fresh install, fixes, setup) - periodic_background/: scripts run by systemd timers or daemons - Preserve existing subdirectory structure within each category - Fix lib/common.sh source paths for new directory depths - Fix CONFIG_DIR depth in setup_periodic_system.sh and check_and_enable_services.sh - Update all references in tests, fresh-install/main.sh, nix modules, and docs - Fix check_polling_antipatterns.sh false positives (||, regex |, case patterns, jq strings) - Fix pre-existing mypy exclusion path and type annotations for moved tools/ directory - Rewrite check_polling_antipatterns.sh using awk (no bash regex loops); add require_serial: true	2026-05-15 00:32:35 +02:00