Skip to content

EC2 Rescue for Linux v1.1.0

Choose a tag to compare

@gregbdunn gregbdunn released this 14 Feb 02:12
· 142 commits to master since this release

General

Added remediation support to the framework and modules, including 8 new or refactored modules which remediate issues
Updated modules to support instances running on the Nitro hypervisor
Added support for Amazon Linux AMI v2
Added sha256 hashes for downloadable tarballs

Framework

[New Feature] Added a set of generic functions, including backup and restore functions, for use in Python-based modoules
[New Feature] Added is_an_instance() to determine if the machine ec2rl is being run on is an ec2 instance
[New Feature] Added remediation module support
[Enhancement] Added support for ALAMI v2
[Enhancement] Limited permission on the RUNDIR to only the creator
[Enhancement] Set upper bound of 100 to concurrency value
[Enhancement] Refactored prediag.get_distro() for readability
[Enhancement] Added subprocess universal_newlines arg to module run to simplify handling of output
[Enhancement] Consolidated the files produced during the binary build to accommodate modules using vendored non-standard libraries
[Enhancement] Reformatted output from the list subcommand to include a remediation support column
[Bugfix] Corrected string matching for pruning modules

Modules

[New Feature] Added remediation module template
[New Module] Added openssh module with remediation support (complete rework of previous SSH module)
[New Module] Added udevnetpersistent module with remediation support
[New Module] Added selinuxpermissive module with remediation support (intended for non-booting/inaccessible instances)
[New Module] Added rebuildinitrd module with remediation support (intended for non-booting/inaccessible instances)
[New Module] Added fstabfailures module with remediation support (intended for non-booting/inaccessible instances)
[Enhancement] Added Nitro/KVM support to ixgbevf, xenfeatures, xennetrocket modules
[Enhancement] Refactored tcprecycle module and added remediation support
[Enhancement] Refactored arpignore module and added remediation support
[Enhancement] Refactored arpcache module and added remediation support
[Bugfix] Corrected description of bccvfsstat module
[Bugfix] Corrected typos in bcctcpretrans module
[Bugfix] Added --preserve-status to all BASH-based modules utilizing "timeout"

Testing

[New Test] Added unit and function tests for openssh module
[New Test] Added unit tests for udevnetpersistent module
[New Test] Added unit tests for selinuxpermissive module
[New Test] Added unit tests for rebuildinitrd module
[New Test] Added unit tests for fstabfailures module
[New Test] Added unit tests for tcprecycle module
[New Test] Added unit tests for arpignore module
[New Test] Added unit tests for arpcache module
[Enhancement] Added a repr test for programversion
[Enhancement] Added check to assert that RUNDIR is created with 0o700 permissions
[Bugfix] Added missing mocks for several tests