mirror of
https://github.com/jokob-sk/NetAlertX.git
synced 2026-10-02 10:45:05 -04:00
- check_trusted_aps() was evaluating every AP sharing a protected SSID against every trusted entry for that SSID, not just its own. A main AP requiring a stricter accepted security set (e.g. wpa3-only) than a separately-trusted extender (e.g. wpa2) caused the extender to be flagged as evil_twin/absent_baseline_clone - it was being judged against the main AP's accepted set instead of its own. Fixed by excluding, from each trusted entry's evaluation, any BSSID that has its own separate trusted entry for the same SSID. - README's "iw isn't in the published image yet" section was already stale within the same PR - this branch's own Dockerfile change adds iw + setcap, so the image ships it. Replaced with one sentence. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>