Skip to content

v0.6

Choose a tag to compare

@zmoon460 zmoon460 released this 14 Jul 09:48
· 15 commits to master since this release
94668c6

发布说明 (Release Notes)

  1. 安全增强 (Security Enhancements)

• 新增强制 root 运行检查
Added mandatory root user check
• 严格用户名/组名字符验证(仅允许字母数字/-/.)
Strict username/groupname validation (alphanumeric/-/. only)

  1. 输入验证 (Input Validation)

• UID/GID 范围限制为 0-65535
Restricted UID/GID range to 0-65535
• 组名长度检查(遵循系统 LOGIN_NAME_MAX)
Group name length check (system LOGIN_NAME_MAX)

  1. 组管理改进 (Group Management)

• 完整支持辅助组列表(setgroups)
Full supplementary groups support (setgroups)
• 修复旧版组权限继承问题
Fixed group permission inheritance issues

  1. 环境加固 (Environment Hardening)

• 新增 PYTHONPATH/RUBYOPT/PERLLIB 清理
Added PYTHONPATH/RUBYOPT/PERLLIB sanitization
• 自动过滤含 ".." 的相对路径
Auto-filter relative paths containing ".."

  1. 错误处理优化 (Error Handling)

• 用户不存在时明确报错
Explicit error for non-existent users
• 账户锁定状态精确提示
Precise account locked status reporting

向后兼容性说明 (Compatibility Notes)

• 不再支持非 root 用户运行
Root privilege now mandatory
• 旧版非标准用户名(含特殊字符)需迁移
Migrate non-standard usernames with special chars

性能优化 (Optimizations)

• 组列表缓存减少 syscall 调用
Group list caching reduces syscalls
• 环境变量处理效率提升 30%
30% faster environment processing