DSH 插件 dsh-auto-approval-plugin：在 Workspace Write 与 Full access 之间加入自动审批档
StyxNether 开发的 dsh-auto-approval-plugin 是 DeepSeek Harness (DSH) 的权限审批插件，旨在填补 Workspace Write 与 Full access 之间的权限档位空缺。该插件引入 auto-approval 预设，在审批路径上注册监听器，基于 session log 中的真实工具参数（而非模型生成的 justification）进行自动判定。若请求目标位于用户配置的可信区（支持 realpath 解析以防符号链接绕过）或匹配无害模式，插件将自动批准该次调用（allowed-once）；否则，请求将传递给人工确认，插件本身不执行
Read MoreDeepSeek Harness Auto-Approval: dsh-auto-mode Bridges the Middle Layer in Permission Modes
Introducing the DSH plugin dsh-auto-mode (@nanmicoder/dsh-auto-mode) maintained by NanmiCoder. It adds an Auto/automatic approval mode on top of the official workspace-write sandbox: routine builds, tests, and dependency installations are automatically allowed, while semantic risks outside the sandbox are reviewed by a classifier, and dangerous operations such as accessing the root directory or credential paths are directly rejected. The article covers a comparison of four permission modes, installation commands, steps to enable it in the Web UI, optional classifier configuration, and an explanation of security boundaries.
Read MoreAdd Secure Automatic Authorization for DeepSeek Harness with dsh-auto-mode
### 正式翻译版本（符合技术文档译法）： dsh-auto-mode is a DeepSeek Harness workflow plugin maintained by NanmiCoder, which inserts an Auto permission tier between Workspace Write and Full access. Daily operations run through the official workspace-write sandbox, with semantic risks classified by the current Session model, and critical path damages will be rejected before execution. This article covers the directory page, GitHub and npm verification of installation commands, decision rules, and security boundaries.
Read MoreLinux Server Security Hardening: Common Issues for Beginners
Linux server security is crucial for beginners. This article summarizes 7 common issues and their solutions: 1. Simple and long - unused passwords: Use strong passwords (8 characters with uppercase, lowercase, numbers, and special symbols), change them regularly, and switch to SSH keys (generate and upload public keys). 2. Disabling the firewall: Only open necessary ports (e.g., Web 80/443, SSH 22), and disable insecure services like Telnet. 3. Exposing SSH ports to the public network: Restrict IP access and use fail2ban to prevent brute - force attacks. 4. Unupdated system/software: Regularly update via yum/apt and enable automatic updates. 5. Permission confusion (777): Follow the principle of least privilege (directories 755, files 644) and avoid root abuse. 6. Ignoring logs: Configure log rotation and regularly check critical logs like auth.log. 7. Redundant services: Uninstall useless services (e.g., vsftpd) and close unused ports. Core principles: least privilege, closing entry points, timely updates, and log auditing. Beginners can start with strong passwords, restricting SSH access, and closing unnecessary services for long - term maintenance.
Read More