userv 1.2.3
Ian Jackson
ijackson at chiark.greenend.org.uk
Mon Jun 1 20:47:44 BST 2026
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
I am pleased to (belatedly) announce the release of userv 1.2.3.
userv (pronounced you-serve) is a program which, according to the
specification, is
a Unix system facility to allow one program to invoke another when
only limited trust exists between them.
Its slogan is:
_Put the security boundary where it ought to be._
It is a tool for system administrators, who often find themselves with
a program running as one user which needs to be able to do certain
things as another user.
It is also a component for application authors who wish to do what is
now known as `privsep', using a process call interface.
For more information about userv, please see:
http://www.chiark.greenend.org.uk/~ian/userv/
This is the first release I've formally announced here for some time.
My apologies for that oversight. The changes since the last version I
announced here were all released to Debian, and are almost entirely
inconsequential build fixes and minor documentation improvements.
There is one bugfix since 1.2.0:
* Do not leak a harmless fd into the service program.
userv source code can be obtained from my git servers:
https://www.chiark.greenend.org.uk/ucgi/~ian/git/userv.git/
https://salsa.debian.org/iwj/userv
Please use the userv-1.2.3 signed git tag, on commitid
e597a01e7f5dca4ed14d9a214211f3354f601fbd
Alternatively, a tarball and detached signature is available here:
http://www.chiark.greenend.org.uk/~ian/userv//ftp/
259431d0033efa109d21ceec818e119c10342cb23e16185c6bd76c035ec646db userv-1.2.3.tar.gz
befb45c0969c39fe909e664a1047fc40fd4eaabafd62d71f037474e10699ec76 userv-1.2.3.tar.gz.sig
For a full list of changes, consult the changelog:
https://www.chiark.greenend.org.uk/ucgi/~ian/git?p=userv.git;a=blob;f=debian/changelog;h=2a9662522d99e04d2b40609da684ac3b18ff1d52;hb=e597a01e7f5dca4ed14d9a214211f3354f601fbd
-----BEGIN PGP SIGNATURE-----
iQJUBAEBCgA+FiEEQWOBFNEyiDslog3dR1FXV9gAJFYFAmod4V0gHGlqYWNrc29u
QGNoaWFyay5ncmVlbmVuZC5vcmcudWsACgkQR1FXV9gAJFYKHQ//ZrCZHJFLX+vv
UtPQEsc+Pea4sKH+/qSIkU4TFNEe9vlwScvgnRHYq+V1gn2+SlUZpk80icUZeF79
VtJtSq5iUlR8Z+qKhLEVyBWQ8jHWV+S6ga5MHPhrhK9KquCFzPKu5m6hleeK1Lg9
Ovuwx+iPqzCSW8MHBU+IzkUHm5LZvd5wu1xdM0NXYt8n8HzmvLLvGkE2MVjOQlHZ
pS6tzYkOxtGHi9+KAHb8QZnvdJygsACO+dKPFihRjSVw/4OHISs61dRgULfV7+1v
EKDNsxXZrN6YlfIXEr7rqt2FXdEuAW602rEpWzENLHM4ylCXH57x/g6NClEKoLDa
MfS4NzQGshPVF2vFIVG+C8HOWswZ240I3qNQ6iDrn/jZlPPoRuQw94vIYfmW085R
qRHrtdo3Erh/xLMkhcakF7PvMxsiqG7wsKKN8EihCrnNJYn2sLsHVzTI7vSKKcOB
lZrYLhKS4bAj+I0fVwz8IhmnUuMI9YH+QHe6NWGdYubQ4laWHVwr2Aa5V/oBt5RI
GBp/i9VECTCdhafMnh7le3zKaxodHwd8RyDVf1tgOS1/ptX6Lkbxw7dsaPkncwwA
jeYWpJ7CRmnUXq42VQ2ti0EmLZ2/1cdCay2BY6QFSynwnWdE4fmT+rWXDTfYsNl8
1mzDLMayICRZ2Cns3aO2ikK8ZKTrIx0=
=TqIt
-----END PGP SIGNATURE-----
--
Ian Jackson <ijackson at chiark.greenend.org.uk> These opinions are my own.
Pronouns: they/he. If I emailed you from @fyvzl.net or @evade.org.uk,
that is a private address which bypasses my fierce spamfilter.
More information about the userv-announce
mailing list