Changelog 2.0.3

Added

• BastionGuard RootGuard

• Added src/rootguard.
• Introduced an eBPF LSM-based privilege-escalation and filesystem metadata monitor.
• RootGuard filters global filesystem metadata activity to privilege-relevant transitions.
• Added complete baseline monitoring for explicitly protected system identities.
• Privilege-sensitive metadata changes affecting protected identities can be denied before they are committed.

Updated

• Updated all BastionGuard repositories to version 2.0.3.
• Synchronized the complete BastionGuard codebase with all fixes and corrections included in this release.
• Updated all related components and repositories to ensure version consistency across the entire BastionGuard ecosystem.

Fixed

• Fixed src/AboutPage.
• Fixed src/DonatePage.
• Fixed src/DashBoardPage.
• Fixed src/MainWindow.
• Fixed src/cef/bank_filter.
• Fixed src/cef/bastionguard_cef.
• Fixed src/SecureBrowser.
• Fixed src/xdg-main.
• Fixed src/xdg-open.
• Fixed src/IdentityLeakPage/ui/IdentityLeakPage.

Security

• Added RootGuard as a new host-level protection component for monitoring privilege-relevant filesystem metadata transitions.
• Improved protection of explicitly monitored system identities through eBPF LSM enforcement, allowing unauthorized metadata changes to be rejected before commit.
• General stability and security fixes across the BastionGuard GUI, Secure Browser, CEF components, XDG integration, and related repositories.