github ovh/the-bastion v3.11.00

latest releases: v3.17.01, v3.17.00, v3.16.99-rc3...
19 months ago

⚡ Security

  • No security fixes since previous release
  • Oldest release with no known security issues: v3.00.00 (first public version)

💡 Highlights

Main changes from the previous version are:

  • SFTP passthrough is now supported, all the commands manipulating accesses have been modified accordingly, to add the --sftp option. More information can be found in the documentation.
  • The groupInfo and accountInfo commands have been augmented with a new --all option, reserved for bastion auditors, to dump detailed data about all the groups or accounts, respectively. The amount of information to be dumped can be controlled with a series of --with-* and --without-* options, more information can be found in each command's own documentation (groupInfo and accountInfo. Prefer the use of accountInfo --all instead of accountList --audit, as the latter will be deprecated soon.

Another change that should be noted is the removal of the implicit --port-any and --user-any to the self(Add|Del)PersonalAccess and account(Add|Del)PersonalAccess commands, when either --user or --port are omitted, to be consistent with group(Add|Del)Server which never had this behaviour. This always emitted a deprecation warning since the first publicly released version, encouraging the explicit use of --user-any and/or --port-any when this was desired. Now, omitting these options will simply return an error, as this has always been the case with group(Add|Del)Server.

A more complete list of changes can be found below, for an exhaustive (and boring) list, please refer to the commit log.

📌 Changes

  • feat: add sftp support
  • feat: add the possibility to auditors of listing all groups with groupInfo and all accounts with accountInfo,
    using --all, along with filtering additional data with --with-* and without-* new options
  • enh: setup-encryption.sh: don't require install to be called before us
  • enh: remove implicit --(user|port)-any if omitted when using (self|account)(Add|Del)PersonalAccess commands
  • fix: race condition when two parallel account creations used the --uid-auto option
  • doc: add restore from backup howto
  • doc: add PuTTY connection setup howto

⏩ Upgrading

Don't miss a new the-bastion release

NewReleases is sending notifications on new releases.