Skip to content

Releases: Snowflake-Labs/sansshell

v1.0.9: Add some needed exec options: (#99)

12 Apr 20:52
3600ab3
Compare
Choose a tag to compare
* Add some needed exec options:

Run as a specific user/group
Append specific env vars to the otherwise clean environment.

Tests for everything

* Simplify uid/gid by prepopulating with our euid/gid

v1.0.8: Add support for CLI quality of life updates: (#95)

30 Mar 23:31
43a843b
Compare
Choose a tag to compare
* Add support for

--targets-file - File with list of targets

Default port settings

$SANSSHELL_PROXY env var

* We're allowed now to just have a proxy and no targets depending on action.

* Fix check to be correct

* Require at least one target and pass it even for changing proxy log level

* Change back to requiring target or proxy

* No use tracking eof state if we don't set it.

Otherwise we loop again and always see EOF and drop the errors we might have gotten.

* Allow no targets so you can still get a Conn to the proxy.

Won't work except for proxy only RPCs like log levels but this makes it avoid passing a needless target

* Fix a typo

* Remove need to set a target for a proxy only action

v1.0.7

04 Mar 16:52
c3a150c
Compare
Choose a tag to compare
Add a cert field to HostAuthInput so we can use a cert from the host …

v1.0.6

03 Mar 22:47
4ddb054
Compare
Choose a tag to compare
Remove ansible from default policy as unsafe to open w/o params. (#84)

v1.0.5: Make sure and import modules in the main.go (#78)

01 Mar 00:36
99c18f5
Compare
Choose a tag to compare
Srop doing this in the common module.

Which modules a server/cli use should be decided by the end builder, not common code.

v1.0.4: Implement a logging module. (#77)

22 Feb 21:31
74cbefe
Compare
Choose a tag to compare
* Implement a logging module.

This can safely set the logging verbosity level on a server using stdr package.

Implement basic unit tests and client/integration tests.

All client side support in sanssh to do this on the proxy itself.

Wire into proxy as an RPC it'll serve in addition to /Proxy.Proxy
This means we need to add interceptors for unary RPCs here now too.

* Rename from logging to sansshell as the service breakdown so it's obvious this is internal state.

* Fix client command to be sansshell instead of logging

v1.0.3: Add a justification optional requirement. (#75)

18 Feb 23:39
fa85312
Compare
Choose a tag to compare
* Add a justification optional requirement.

Servers can require a justification string to be passed in from client side metadata.

They can also provide a user defined function to validate this as well.

Plumb into servers, sanssh and integration tests.

* Update usage information and important flags

* Refactor into authz hook style.

Telemetry just extracts anything which is sansshell-* from metadata and logs it.

If it gets an error from the handler (which is where authz hooks) it'll bail at that point.

So we get logging in one place and authz handled correctly in it's place.

* Remove debugging

* Convert server startup to take lists of authz hooks.