---
title: "Agent 0.3.0"
description: "Linux package identity for distribution-aware vulnerability checks, script policy confirmation, terminal controls, and host firewall reporting."
url: "https://support.outpostplatform.com/releases/agent/0.3.0/"
product: "agent"
type: "release-note"
status: "draft"
ai_summary: "Agent 0.3.0 reports Linux distribution and native package identity for vulnerability matching, confirms received script settings, enforces script and interactive terminal controls, and reports the detected host firewall. Use with Depot 0.6.0 to see delivery and security evidence in the console."
source: "https://gitlab.com/outpostplatform/docs/-/edit/main/src/content/docs/releases/agent/0.3.0.md"
license: "CC BY 4.0"
---

# Agent 0.3.0

Agent 0.3.0 gives IT teams and MSPs better evidence for Linux vulnerability
decisions and endpoint policy delivery. These improvements are based on
evaluator feedback.

## Highlights {#highlights}

- **Linux vulnerability evidence.** Distribution and package details let
  Outpost recognize distribution backports when assessing vulnerabilities.
- **Script policy confirmation.** Verify that an endpoint received the
  script settings you intended.
- **Host firewall visibility.** See which firewall answered on Linux, macOS,
  and BSD endpoints.

## Added {#added}

### Inventory and security status

- Reports the Linux distribution, release, package manager, and native source
  package version for distribution-aware vulnerability checks. See
  [Vulnerabilities](/automation/vulnerabilities/).
- Reports the detected host firewall: nftables, ufw, firewalld, iptables, pf,
  ipfw, or Application Firewall. When no tooling answers, the console shows
  **Not reported**. This assesses only the endpoint's own firewall, not
  upstream network protection. See
  [Endpoint security](/endpoints/endpoint-details/#security).

### Policy evidence

Reports receipt of script settings so **Effective config** can show
**Applied**, **Pending**, or **Not reported** under **Agent (script
environment)**. See
[Script delivery](/automation/effective-configuration/#script-delivery).

## Security {#security}

### Scripts and interactive terminals

- The agent receives and enforces script settings. When scripts are off, it
  refuses one-off, scheduled, library, and AI or MCP script runs.
- The separate **Remote shell** policy blocks interactive terminal sessions,
  including AI and MCP terminal requests. Outpost and the agent enforce it.
  To block both scripts and terminals, turn off both settings.

See [Scripting](/automation/scripting/) and
[Terminal access policy](/endpoints/live-and-console/#control-terminal-access).

## Upgrade notes {#upgrade-notes}

Use with [Depot 0.6.0](/releases/depot/0.6.0/). Follow
[Agent updates](/agent/updates/) to check for or install the update. The agent
service restarts during an update, and the endpoint briefly appears offline.

After the endpoint reports its inventory, vulnerability findings refresh on
the next scan. Check **Profiles** > **Effective config** for confirmation of
script settings.