Merged
Conversation
…ndling in CHANGELOG
* Atheris fuzz initial commit * Fix pylint * Update payload alphabet to exclude backtick and dollar characters * Refactor fuzzing commands and update Dockerfile for dependency installation * Refactor GitHub Actions workflow to separate testing and linting steps, update dependencies installation, and improve readability * Separate GA workflows for fuzzing, linting, and SSH end-to-end testing in different files * Merge all tests into a single file
…ronment variables and adding unit tests for validation
…/RPM packaging workflows (#274) * Implement structured security audit logging with JSON output and ECS alignment * add setup-system command and tests * extract compose and test helper scripts * stabilize deb/rpm packaging flow and versioning * test: add functional coverage for setup-system, audit JSON, and parser module * bump version to 0.11.1rc3
Add harden-init profiles and bash completion for lshell
…und_jobs, command_timeout, and max_processes
… README and man page
…hecks and conditions
New feature: containment: add runtime limits and optional cgroup targeting
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
v0.11.1 21/03/2026
lshell setup-systemto provision logging paths/permissions and user/group wiring for deployments.lshell harden-initwith hardened templates (sftp-only,rsync-backup,deploy-minimal,readonly-support) plus--dry-run, scoped[grp:*]/[user:*], and validation checks.command not foundmessages.LSHELL_ARGS.security_audit_json.max_sessions_per_user,max_background_jobs,command_timeout, andmax_processes(RLIMIT_NPROC), and surfaced them in policy diagnostics.Ctrl+C/interrupt flows andCtrl+Dhandling when stopped/background jobs exist.etc/bash_completion.d/lshell).pyproject.toml(PEP 517) and removedsetup.py.Atheris) and expanded security/property-based tests.