rush-1.8 released [stable]

[Sergey Poznyakoff]

Hello,

I am pleased to announce the release of GNU rush version 1.8.

GNU rush is a restricted user shell designed for sites that provide
limited remote access to their resources, such as svn or git repositories,
scp, or the like.  Using a flexible configuration file, GNU rush gives
administrators complete control over the commands invoked by the users,
and allows them to tune the usage of system resources, such as virtual
memory, CPU time, etc. on a per-user basis.

See below for the list of noteworthy changes in this release.
              
Here are the compressed sources:
  http://ftp.gnu.org/gnu/rush/rush-1.8.tar.gz   (1.2MB)
  http://ftp.gnu.org/gnu/rush/rush-1.8.tar.bz2  (932KB)
  http://ftp.gnu.org/gnu/rush/rush-1.8.tar.xz   (740KB)

Here are the GPG detached signatures[*]:
  http://ftp.gnu.org/gnu/rush/rush-1.8.tar.gz.sig
  http://ftp.gnu.org/gnu/rush/rush-1.8.tar.bz2.sig
  http://ftp.gnu.org/gnu/rush/rush-1.8.tar.xz.sig

Use a mirror for higher download bandwidth:
  http://www.gnu.org/order/ftp.html

Here are the MD5 and SHA1 checksums:

d148ec9ce27a54857093aaefd20e7aa9  rush-1.8.tar.gz
cb06419cf5f20c98be6b7d3e62b83780  rush-1.8.tar.bz2
50d8bb3c0a502f2c1f5b374046ff78de  rush-1.8.tar.xz
c266373e0730ce14345219e045c6e6002089954f  rush-1.8.tar.gz
cec95494a9ff7fe553222f8884c535a288ce6de8  rush-1.8.tar.bz2
e882f68d9004af608b7e5c430c367645aa3e3b75  rush-1.8.tar.xz

[*] Use a .sig file to verify that the corresponding file (without the
.sig suffix) is intact.  First, be sure to download both the .sig file
and the corresponding tarball.  Then, run a command like this:

  gpg --verify rush-1.8.tar.gz.sig

If that command fails because you don't have the required public key,
then run this command to import it:

  gpg --keyserver keys.gnupg.net --recv-keys 3602B07F55D0C732

and rerun the 'gpg --verify' command.

This release was bootstrapped with the following tools:
  Autoconf 2.69
  Automake 1.14
  Makeinfo 5.2

NEWS

* rushlast and rushwho

Select the most suitable time representation for the duration field,
depending on the requested width.

* chroot handling

If chroot is requested, re-read the password database after chrooting.

* Supplementary user groups

Set supplementary groups when switching to user privileges.

* Change provisions for interactive shell usage

Interactive rules are marked with the keyword "interactive".  Only
such rules are considered when rush is invoked without the -c option.
Support for the old (global) "interactive" keyword is discontinued.

* The env statement

The env statement can contain references to unmodified environment
variables.  E.g. this is now valid:

  env PATH=/sbin:$PATH

* Testsuite is provided
  
* Minor fix in TXPMUX code.

* Fix CVE-2013-6889

Best regards,
Sergey