The release of the specialized command shell GNU Rush 2.2 (Restricted User Shell) has been published, designed for use in systems with limited remote access where user actions need to be restricted. Rush allows defining which command line functions a user can use and what resources are allocated to them (memory size, CPU time, etc.). For example, Rush can be used for remotely launching programs in a chroot environment, enhancing security when granting access through programs like sftp-server or scp, which, by default, have access to the entire file system.
The new release introduces the ability to perform checks on the state of files and directories in the file system (for instance, rules can now verify types, permissions, and file owners). The format of options for checks resembles the operation of the 'test' command. For example, to check if a path exists and points to a directory, you can use the construct 'match -d /var/lock/sd'.
Additionally, the release of the GNU pies 1.7 utility has been published, aimed at coordinating the launch and execution of applications. Based on a specified configuration, the program runs executable files in the background, monitors their execution, and allows binding handlers for various states. For instance, it can restart a program in case of a crash, execute another program, or send a notification to the administrator. Notably, GNU pies can also serve as the init process, started first during system boot, and supports the format /etc/inittab.
In the new version of GNU Pies, the method of handling configuration files has been changed. The built-in preprocessor has been removed, and each file specified in the '#include' and '#include_once' statements is now processed separately using an external preprocessor (previously, substitutions were first expanded by the built-in preprocessor, and then the result was processed by the external preprocessor m4 as a whole). New diagnostic statements '#warning "TEXT"', '#error "TEXT"', and '#abend "TEXT"' have been added to generate warnings and output errors.
The release of GNU mailutils 3.14 can also be noted, which offers libraries and utilities for performing various tasks related to email, such as parsing fields in messages, working with mail databases (mailbox, maildrop, maildir), filtering messages, extracting email addresses and URLs, handling MIME blocks, and retrieving emails from external sources. servers using the IMAP4 and POP3 protocols and sending emails via the SMTP protocol, including using TLS, SASL, and GSSAPI.
In the new version of GNU mailutils, TLS support has been completely rewritten. A tls.handshake-timeout setting has been added to establish a timeout for TLS. The mu_mailbox_append_message_ext function has been added for appending a message to a mailbox. The mail utility has introduced an unread (U) command to remove the read status of a message, and in the copying commands to another mailbox, status (read or unread) preservation has been ensured. The code for parsers and scanners has been rewritten, and GNU bison and flex are now required for building. There is also the ability to include mime types in the libmailutils library. In Maildir and MH, information about the sender transmitted in the 'MAIL FROM' command during the SMTP session is no longer reflected in the X-Envelope-Sender and X-Envelope-Date headers; instead, this information is saved in the Return-Path and Received headers.
Source: opennet.ru
