Release v0.3.4

Security

• Fix a local privilege escalation in backups (GHSA-jqwc-wmh4-9qw3, High). When automatic backups were enabled and a less-privileged local user could write to the backup directory, the root background service could be made to overwrite another file on the host and hand its ownership to that user. Backup and log files are now created without following links, and ownership only changes on files and directories ONCE created itself.

Changed

• once backup <host> <file> no longer overwrites an existing file. If the file already exists the backup fails; choose a new filename, or move the existing file aside first. Scheduled backups use new timestamped names and are unaffected.

Installs running the background service update themselves automatically unless ONCE_NO_SELF_UPDATE is set; otherwise run once self-update.

Full Changelog: v0.3.3...v0.3.4