Harden blueman/main/NetConf.py: reliability, concurrency, portability, tests - #3318

Open

geraldo-netto wants to merge 16 commits into

blueman-project:mainfrom

geraldo-netto:fix/netconf-hardening

Commits on Jun 19, 2026

fix(netconf): log DHCP daemon termination instead of print (obs-2)

geraldo-netto
and
claude
committed
ea22379
fix(netconf): log swallowed BridgeException on cleanup (obs-5)

geraldo-netto
and
claude
committed
38bfa27
refactor(netconf): resolve iptables via PATH (plat-3)

geraldo-netto
and
claude
committed
f621f67
refactor(netconf): abstract proc access in _is_running (plat-9)

geraldo-netto
and
claude
committed
34578a1
feat(netconf): fail clearly when IPv4 forwarding sysctl is absent (plat-4)

geraldo-netto
and
claude
committed
5113590
refactor(netconf): prefer /run and centralize the run path (cfg-3)

geraldo-netto
and
claude
committed
08bf281
fix(netconf): omit empty dns-server dhcp-option for dnsmasq (depend-2)

geraldo-netto
and
claude
committed
c0f8f51
fix(netconf): require a pid file before locking dhcp (depend-1)

geraldo-netto
and
claude
committed
7f50b47
perf(netconf): poll for udhcpd pid instead of fixed sleep (mem-3)

geraldo-netto
and
claude
committed
1fb0eb8
fix(netconf): make DHCP clean_up idempotent and crash-safe (sm-7)

geraldo-netto
and
claude
committed
154ceb1
fix(netconf): bound DHCP daemon startup with a communicate timeout (wd-7)

geraldo-netto
and
claude
committed
b2e6b92
fix(netconf): reconcile iptables rules by comment tag (dist-2)

geraldo-netto
and
claude
committed
7c94aa2
fix(netconf): serialize mechanism with an exclusive flock (dist-1)

geraldo-netto
and
claude
committed
2156b59
fix(netconf): roll back partial state when apply_settings fails (dist-4)

geraldo-netto
and
claude
committed
ff6466b
refactor(netconf): extract _apply_settings phases into helpers

geraldo-netto
and
claude
committed
ba9cbac
fix(netconf): harden _is_running against non-positive pids and EPERM

geraldo-netto
and
claude
committed
9266e87

Navigation Menu

Uh oh!

Uh oh!

Harden blueman/main/NetConf.py: reliability, concurrency, portability, tests - #3318

Harden blueman/main/NetConf.py: reliability, concurrency, portability, tests#3318
geraldo-netto wants to merge 16 commits into
blueman-project:mainfrom
geraldo-netto:fix/netconf-hardening

Commits on Jun 19, 2026

fix(netconf): log DHCP daemon termination instead of print (obs-2)

fix(netconf): log swallowed BridgeException on cleanup (obs-5)

refactor(netconf): resolve iptables via PATH (plat-3)

refactor(netconf): abstract proc access in _is_running (plat-9)

feat(netconf): fail clearly when IPv4 forwarding sysctl is absent (plat-4)

refactor(netconf): prefer /run and centralize the run path (cfg-3)

fix(netconf): omit empty dns-server dhcp-option for dnsmasq (depend-2)

fix(netconf): require a pid file before locking dhcp (depend-1)

perf(netconf): poll for udhcpd pid instead of fixed sleep (mem-3)

fix(netconf): make DHCP clean_up idempotent and crash-safe (sm-7)

fix(netconf): bound DHCP daemon startup with a communicate timeout (wd-7)

fix(netconf): reconcile iptables rules by comment tag (dist-2)

fix(netconf): serialize mechanism with an exclusive flock (dist-1)

fix(netconf): roll back partial state when apply_settings fails (dist-4)

refactor(netconf): extract _apply_settings phases into helpers

fix(netconf): harden _is_running against non-positive pids and EPERM