ewilliams28/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-08-28 05:16:23 -06:00
Code Issues Packages Projects Releases Wiki Activity

docs(start): correct headless credential handoff to the SQLite auth store (#131024)

Browse Source
This commit is contained in:
Peter Steinberger
2026-08-27 09:40:27 -07:00
committed by GitHub
parent 59488aa80b
commit ff3cf3de3b
31 changed files with 121 additions and 89 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/cli/security.md
+1 -1
View File
@@ -124,7 +124,7 @@ Applies safe, deterministic remediations:
- flips common `groupPolicy="open"` to `groupPolicy="allowlist"` (including account variants in supported channels)
- when WhatsApp group policy flips to `allowlist`, seeds `groupAllowFrom` from the stored `allowFrom` file when that list exists and config does not already define `allowFrom`
- tightens permissions for state/config and common sensitive files (`credentials/*.json`, `auth-profiles.json`, `openclaw-agent.sqlite`, and legacy session artifacts)
- tightens permissions for state/config and common sensitive files (`credentials/*.json`, legacy `auth-profiles.json`, `openclaw-agent.sqlite`, and legacy session artifacts)
- also tightens config include files referenced from `openclaw.json`
- uses `chmod` on POSIX hosts and `icacls` resets on Windows