New features:
- cf-promises flag --parse-tree is replaced by
--policy-output-format=, requiring the user to
specify the output format (none, cf, json)
- cf-promises allows partial check of policy (without
body common control) without integrity check;
--full-check enforces integrity check
- agent binaries support JSON input format (.json
file as generated by cf-promises)
- cf-key: new options --trust-key/-t and --print-digest/-p
- Class "failsafe_fallback" is defined in failsafe.cf when
main policy contains errors and failsafe is run because
of this
- add scope attribute for body classes (Redmine #2013)
Changes:
- process promises don't log if processes are out of range
unless you run in verbose mode
- reports promises are now allowed in any context (Redmine
#2005)
- cf-report has been removed
- cf-execd: --once implies --no-fork
Bugfixes:
- do not wait for splaytime when executing only once
- disable xml editing functionality when libxml2 doesn't
provide necessary APIs (Redmine #1937)
Approved by: cy (maintainer, implicit)
