Scheck Version History¶
1.0.8 (2022/03/11)¶
Release Notes¶
Script-related: None
New Features:
- Added scheck system script blacklist
1.0.7 (2021/12/7)¶
Release Notes¶
Code-related
- Added 14 nginx inspection rules
- Fixed incorrect descriptions in some manifest files
- Added interval duration field to the luastatus command
- Extended Developer Mode features based on 1.0.6: In this mode, all rules run once every five minutes. The log level is automatically lowered to
debug.
1.0.6 (2021/11/19)¶
Release Notes¶
Code-related - When reporting information to DataKit, version and input information are included - Added README-en; code can be compiled from GitHub - Added documentation How to Use Lua Standard Library and Lua-lib - Fixed bugs in some rules - Added Developer Mode to view runtime memory, CPU, and Lua cache usage. Disabled by default. Additional features to be added later. See documentation: How to Use Developer Mode to View Cache
1.0.5 (2021/11/03)¶
Release Notes¶
Code-related - Added container-related go-openlib interface functions - Added 21 container-related script rules - Optimized unit tests: mock can be used when specific environment requirements exist
Script-related: - Added k8s-related detection scripts: kube-apiserver, kubelet, etcd - Added docker-related detection scripts: container start commands, container list, etc.
1.0.4 (2021/10/14)¶
Release Notes¶
- Fixed permission issues for version files and others after scheck installation
- Fixed rule execution anomalies caused by DataKit's inability to report information
- Adjusted Lua reference to Golang lib usage
- Adjusted the
-luastatuscommand to no longer generate local HTML and MD files - Moved data type files (password library) to the
datadirectory in the current directory; they are no longer overwritten upon process restart - Added detection of user rule ID specification
- Added methods for deleting cache and deleting global cache
- Memory usage optimization
- Smoothness optimization for Lua rule execution
Security check script-related:
- Added crontab detection script
- Enhanced user detection frequency (changed from polling to real-time monitoring)
1.0.3 (2021/09/27)¶
Release Notes¶
- Fixed fsnotify manifest file error.
1.0.2 (2021/09/23)¶
Release Notes¶
This release includes significant adjustments to Scheck, mainly in terms of performance and stability.
- Memory and performance optimization
- Adjusted the file monitoring detection method, replacing the previous file cache approach
- In addition to the interval-based execution mode, added a resident running category for rule scripts, commonly used in monitoring scenarios such as file changes.
- Added Lua script execution timeout control
- Added statistics for Lua runtime
- Added command line
-checkfeature
v1.0.0-67-gd445240 (2021/8/27)¶
Release Notes¶
Script-related:
- Added multiple container detection scripts
New Features:
- Modified scheck configuration
- Added Alibaba Cloud log integration
- Added custom rule path and user-defined lua.libs path
- Added cgroup functionality
- Auto-update for user-defined rule scripts
- Windows PowerShell installation and Linux shell installation
- Send info on first service startup
- Output supports multi-endpoint sending
Optimizations: - CPU performance optimization - Yuque documentation restructuring
v1.0.1-67-gd445240 (2021/6/18)¶
Release Notes¶
Script-related:
- Added MySQL weak password scanning
New Features:
- Added 3 funcs
v1.0.1-62-g7715dc6¶
Release Notes¶
This release unified the operation-level name of Security Checker to scheck. Fixed related bugs.
Script-related:
- Modified desc content spacing
- Adjusted script execution frequency
New Features:
- Added scheck's own MD5 option
Bug Fixes¶
- Optimized script runtime performance
%!(EXTRA string=1.0.7-7-g251eead, string=2023-04-06 11:17:57)