ovh/the-bastion
1
1
Fork 0
mirror of https://github.com/ovh/the-bastion.git synced 2025-09-13 00:14:18 +08:00
Code Issues Projects Releases Packages Wiki Activity

release v3.03.00

Browse source
This commit is contained in:
Stéphane Lesimple 2021-02-22 13:01:11 +00:00 • committed by Stéphane Lesimple
parent 4fd010c355
commit b6c7503a73
3 changed files with 23 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
doc/CHANGELOG.md
View file

@ -1,3 +1,20 @@
## v3.03.00 - 2021/02/22
- feat: transmit PIV enforcement status to remote realms, so that the remote policy can be enforced (#33)
- feat: add `groupGenerateEgressKey` and `groupDelEgressKey` (#135)
- feat: auto-add hostname as comment in `groupAddServer` and `selfAddPersonalAccesss` (side-note in #60)
- enh: `groupAddGuestAccess` now supports setting a comment (#17, #18)
- enh: `groupAddServer`: augment the returned JSON with the added server details
- enh: move unexpected-sudo messages from `security` to `code-warning` type
- enh: egress ssh key: compute an ID so that keys can be pointed to and deleted
- fix: `groupDelGuestAccess`: deleting a guest access returned an error on TTL-forced groups
- fix: groupSetRole(): pass sudo param to subfuncs to avoid a security warning
- fix: execute(): remove osh_warn on tainted params to avoid exposing arguments on coding error
- fix: `groupModify`: deny early if user is not an owner of the group
- enh: `groupInfo`: nicer message when no egress key exists
- enh: `install`: use in-place overwrite for sudoers files, the 3-seconds wait by default has been removed (and the `--no-wait` parameter now does nothing)
- fix: `interactive`: omit inactivity message warning when set to 0 seconds
- a few other internal fixes here and there
## v3.02.00 - 2021/02/01 ## v3.02.00 - 2021/02/01
- no functional change since rc4, this version ends the rc cycle and is considered stable - no functional change since rc4, this version ends the rc cycle and is considered stable

5
doc/sphinx/installation/upgrading.rst
View file

@ -24,6 +24,11 @@ Note that if you're using an infrastructure automation tool such as Puppet, Ansi
Version-specific upgrade instructions Version-specific upgrade instructions
===================================== =====================================
v3.03.00 - 2021/02/22
*********************
No specific upgrade instructions.
v3.02.00 - 2021/02/01 v3.02.00 - 2021/02/01
********************* *********************

2
lib/perl/OVH/Bastion.pm
View file

@ -5,7 +5,7 @@ use common::sense;
use Fcntl; use Fcntl;
use POSIX qw(strftime); use POSIX qw(strftime);
our $VERSION = '3.02.00'; our $VERSION = '3.03.00';
BEGIN { BEGIN {
# only used by the handler below # only used by the handler below