Repository navigation
v0.6
发布说明 (Release Notes)
- 安全增强 (Security Enhancements)
• 新增强制 root 运行检查
Added mandatory root user check
• 严格用户名/组名字符验证(仅允许字母数字/-/.)
Strict username/groupname validation (alphanumeric/-/. only)
- 输入验证 (Input Validation)
• UID/GID 范围限制为 0-65535
Restricted UID/GID range to 0-65535
• 组名长度检查(遵循系统 LOGIN_NAME_MAX)
Group name length check (system LOGIN_NAME_MAX)
- 组管理改进 (Group Management)
• 完整支持辅助组列表(setgroups)
Full supplementary groups support (setgroups)
• 修复旧版组权限继承问题
Fixed group permission inheritance issues
- 环境加固 (Environment Hardening)
• 新增 PYTHONPATH/RUBYOPT/PERLLIB 清理
Added PYTHONPATH/RUBYOPT/PERLLIB sanitization
• 自动过滤含 ".." 的相对路径
Auto-filter relative paths containing ".."
- 错误处理优化 (Error Handling)
• 用户不存在时明确报错
Explicit error for non-existent users
• 账户锁定状态精确提示
Precise account locked status reporting
向后兼容性说明 (Compatibility Notes)
• 不再支持非 root 用户运行
Root privilege now mandatory
• 旧版非标准用户名(含特殊字符)需迁移
Migrate non-standard usernames with special chars
性能优化 (Optimizations)
• 组列表缓存减少 syscall 调用
Group list caching reduces syscalls
• 环境变量处理效率提升 30%
30% faster environment processing