Skip to content

v2.1.0
Compare
Choose a tag to compare
@majewsky majewsky released this 30 Dec 16:36
· 2 commits to master since this release
v2.1.0
This tag was signed with the committer’s verified signature.
majewsky Stefan Majewsky
GPG key ID: D6019A3E17CA2D96
Learn about vigilant mode.
3e31320

New features:

  • The configuration variables PORTUNUS_GROUP_NAME_REGEX and PORTUNUS_USER_NAME_REGEX have been added to expand the
    range of supported user and group names. If non-default name regexes are configured, Portunus will still enforce the
    POSIX account name regex for POSIX users and POSIX groups. Also, names with characters that have special meaning in
    LDAP DNs will always be rejected, regardless of what is configured. This protects against syntax injection attacks
    similar to SQL injections.

Changes:

  • The size of the orchestrator binary that runs with root privileges has been reduced by about 10-15% by replacing
    usages of a regex engine with explicit string parsers.
  • Binaries can now be installed with go install if make is not available for some reason.
Assets 2