cadline_web/www_archline_hu
11
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
15 Commits 8 Branches 0 Tags 91 MiB
PHP 72%
JavaScript 18.2%
CSS 8.1%
Less 1.4%
HTML 0.2%
cceb982375
Go to file
LÁZÁR Imre AI Agent cceb982375 feat(deployed): add AcyMailing 6.2.0 (no-source, vetted live) 
AcyMailing (Acyba); installed 6.2.0 is on an EOL branch, only 7.7.5+ published -> deployed files.

Signed-off-by: LÁZÁR Imre <imre@illusion.hu>
Assisted-by: claude-code@claude-opus-4-8
2026-07-16 11:24:44 +02:00
cadline build(baseline): constituents+generator skeleton 2026-07-16 09:40:46 +02:00
core core: add Joomla 3.8.11 official package (deployed-form source) 2026-07-16 09:40:46 +02:00
deployed feat(deployed): add AcyMailing 6.2.0 (no-source, vetted live) 2026-07-16 11:24:44 +02:00
lib feat(deployed): add K2 2.8.0 (no-source, vetted live) 2026-07-16 09:48:13 +02:00
overrides build(baseline): constituents+generator skeleton 2026-07-16 09:40:46 +02:00
packages build(baseline): constituents+generator skeleton 2026-07-16 09:40:46 +02:00
tests feat(deployed): add K2 2.8.0 (no-source, vetted live) 2026-07-16 09:48:13 +02:00
.gitignore build(baseline): constituents+generator skeleton 2026-07-16 09:40:46 +02:00
build-baseline.sh build(baseline): constituents+generator skeleton 2026-07-16 09:40:46 +02:00
malware-iocs.md build(baseline): constituents+generator skeleton 2026-07-16 09:40:46 +02:00
malware-iocs.paths build(baseline): constituents+generator skeleton 2026-07-16 09:40:46 +02:00
PROVENANCE.md build(baseline): constituents+generator skeleton 2026-07-16 09:40:46 +02:00
README.md build(baseline): constituents+generator skeleton 2026-07-16 09:40:46 +02:00
RUNBOOK.md build(baseline): constituents+generator skeleton 2026-07-16 09:40:46 +02:00

README.md

www.archline.hu — clean baseline (constituents + generator)

This repo produces the clean code baseline of the www.archline.hu docroot (Cadline, Joomla 3.8.11, host tanis.cadline.hu) — the post-compromise, malware-free, faithful reproduction of the live server's source files. The baseline is the input to the illusion/hids verifier (imrcli per-vhost vanilla_ref); the verification itself lives there, not here.

Model: constituents + a generator script (not a checked-out tree)

A deployed Joomla docroot differs from any repo/source layout: extensions install their files across many docroot paths (administrator/…, components/…, media/…, plugins/…) via their manifest. So this repo stores the baseline constituents and a script assembles the deployed baseline:

./build-baseline.sh            # → out/  = the deployed CODE docroot (the baseline)
  • core/ — Joomla 3.8.11 official package (deployed form).
  • packages/<slug>/ — upstream-obtainable extensions; the pristine package is manifest-mapped to deployed paths by lib/jmap.py, then our legit delta (cadline.patch) is applied — so git history shows exactly how we differ from upstream.
  • deployed/<slug>/ — no-source extensions: vetted live files, placed directly.
  • cadline/<slug>/ — Cadline own-code (+ submodules for the deployed-layout Cadline repos).
  • overrides/ — Cadline core modifications as patches on vanilla.
  • Malware (malware-iocs.md) and runtime data are excluded; the result is code only.

See RUNBOOK.md for the build recipe and module inventory, PROVENANCE.md for per-extension origins, and malware-iocs.md for the excluded IOC set.

Authority

The live docroot (RO mirror) is the source of truth — the goal is its faithful, malware-free reproduction. The earlier single-commit "monolith" baseline is an unvalidated helper only (it dropped extension manifests and clean core files and kept installer junk); it is not a target.

References

  • Audit + baseline method: cadline/infra — docs/audit/archline-hu-2026/
  • Per-vhost baseline tracking: cadline/infra#47 · Incident: cadline/infra#17
  • Verifier (consumer): illusion/hids (imrcli)