Skip to content

Sentinel v0.10.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Jun 16:10
v0.10.0
fc353cf

Sentinel 0.10.0

Four new opt-in capabilities (all default off — existing configs and
behaviour are unchanged until you turn them on), plus a packaging fix.

What's new

  • Policy allow/deny lists ([policy]) — auto-allow or auto-deny a
    request before the dialog, matched on the requesting program's
    resolved executable path (/proc/<pid>/exe — never the spoofable
    argv[0]), its basename, or the polkit action id. deny wins over
    allow. An allow entry is passwordless elevation, so treat it like a
    sudoers NOPASSWD line.

  • "Remember" checkbox ([general].remember_seconds) — set a non-zero
    window and the dialog grows a "Remember for N min" checkbox. Tick
    it and Allow, and repeat requests from the same login session for
    the same service + binary skip the dialog until the window lapses —
    opt-in per request, not a silent global. Grants are bound to your
    loginuid + kernel audit sessionid, use a boot-time clock
    (rollback-proof), live in a root-owned /run/sentinel/ts store for
    sudo/su (and an in-memory agent cache for polkit), never survive a
    reboot, and are hard-capped at 900 s. Both the KDE and COSMIC dialogs
    render the checkbox.

  • Desktop notifications ([notifications]) — on_deny / on_timeout
    post a notify-send notification on the polkit/GUI path, including the
    silent [policy] denials where no dialog appears. Terminal sudo/su
    denials are already visible in the terminal, so they're out of scope.

  • Full KDE-helper localization — the Plasma helper now localizes its
    UI chrome across all 12 locales (en, de, es, fr, it, ja, nl, pl, pt,
    ru, tr, zh), matching the COSMIC helper.

Fixes

  • packaging-kde/install.sh now works from a source checkout
    (pkexec ./packaging-kde/install.sh); it had resolved target/ and
    the shared config/ relative to the wrong directory after the
    monorepo move.

See the configuration reference
for the new [policy], [notifications], and remember_seconds keys.

Install

Arch (AUR)

paru -S sentinel-kde       # KDE Plasma
paru -S sentinel-cosmic    # COSMIC

From source

git clone https://github.com/atayozcan/sentinel.git
cd sentinel
pkexec ./install.sh                 # COSMIC frontend
pkexec ./packaging-kde/install.sh   # KDE Plasma frontend

Prebuilt bundle

Download sentinel-0.10.0-<arch>-linux.tar.gz (COSMIC) or
sentinel-kde-0.10.0-<arch>-linux.tar.gz (KDE), extract, then:

sudo SENTINEL_SKIP_BUILD=1 ./install.sh
Assets 18
Loading