------------------------------------------------------------------- Thu May 4 15:04:58 UTC 2023 - Frederic Crozat - Add _multibuild to define additional spec files as additional flavors. Eliminates the need for source package links in OBS. ------------------------------------------------------------------- Mon May 9 06:59:02 UTC 2022 - Paolo Stivanin - Update to 0.8.3: * Add vararg support to python bindings for capng_updatev * Add support for ambient capabilities * Add support for V3 filesystem capabilities * If procfs is not available, leave last_cap as CAP_LAST_CAP * If bounding and ambient not found in status, try prctl method * In capng_apply, move ambient caps to the end of the transaction * In capng_apply, return errors more aggressively. * In capng_apply, if the action includes the bounding set,resync with the kernel * Fix signed/unsigned warning in cap-ng.c * In capng_apply, return a unique error code to diagnose any failure * In capng_have_capability, return 0 for failure * Add the libdrop_ambient admin tool * In capng_apply, if we blew up in bounding set, allow setting capabilities * If PR_CAP_AMBIENT is not available, do not build libdrop_ambient * Improve last_cap check * Fix parameters to capng_updatev python bindings to be signed * Detect capability options at runtime to make containerization easier (ntkme) * Initialize the library when linked statically * Add gcc function attributes for deallocation ------------------------------------------------------------------- Thu Dec 9 22:05:19 UTC 2021 - Ferdinand Thiessen - Update to 0.7.11 * Really clear bounding set if asked in capng_change_id * Add CAP_PERFMON, CAP_BPF, & CAP_CHECKPOINT_RESTORE * Avoid malloc/free in capng_apply (Natanael Copa) * If procfs is not available, get bounding set via prctl - Removed unneeded rules from rpmlintrc ------------------------------------------------------------------- Tue May 12 12:31:39 UTC 2020 - Paolo Stivanin - Update to 0.7.10: * Update capng_change_id man page * Add capng_have_permitted_capabilities function * Update filecap to output which set the capabilities are in * Fix filecap to not output an error when a file has no capabilities * Add udplite support to netcap * Fix usage of pthread_atfork (Joe Orton) * Mark processes in child user namespaces with * (Danila Kiver) ------------------------------------------------------------------- Thu Aug 8 11:05:37 UTC 2019 - Dominique Leuenberger - Own %{_datadir}/aclocal: when we might switch to pkgconf instead of pkg-config, nothing in the build root is 'accidentally' owning this directory for us. ------------------------------------------------------------------- Tue Feb 20 10:16:07 UTC 2018 - tchvatal@suse.com - Move %doc to %license for licenses ------------------------------------------------------------------- Sun Feb 18 12:13:56 UTC 2018 - jengelh@inai.de - Remove ineffective --with-pic. Fix SRPM group. Redo descriptions. - Rename %soname to %sover to better reflect its use. ------------------------------------------------------------------- Sun Feb 18 09:23:18 UTC 2018 - avindra@opensuse.org - Update to version 0.7.9: * Detect and output a couple errors in filecap * Use pthread_atfork to optionally reset the pid and related info on fork - cleanup with spec-cleaner - use https urls ------------------------------------------------------------------- Thu May 17 16:46:07 UTC 2017 - alexander_naumov@opensuse.org - Update to version 0.7.8: * Improve Python3 support * Fix the thread separation test * Correct typo in cap_pacct text * Update man page for captest * Fix sscanf string lengths in netcap * Correct linking of python3 module ------------------------------------------------------------------- Wed Dec 2 14:28:00 UTC 2015 - p.drouand@gmail.com - Update to version 0.7.7 * Make sure all types used in _lnode are defined in proc-llist.h * Fix python binding test for old kernels * Fix leaked FD in library init - Changes from version 0.7.6 * Fix python3 support - Changes from version 0.7.5 * Make python3 supported * In python bindings test, clamp CAP_LAST_CAP with /proc/.../cap_last_cap * Update table for 3.16 kernel ------------------------------------------------------------------- Thu Jun 19 17:22:55 UTC 2014 - crrodriguez@opensuse.org - Remove unused BuildRequires on libattr-devel ------------------------------------------------------------------- Thu May 15 13:19:57 UTC 2014 - tchvatal@suse.com - Version bupm to 0.7.4 - Cleanup with spec-cleaner - Remove useless specification of attributes - Really split the two spec files instead of copying them to avoid the huge ifdefing. + more readable - version must be edited in two places when bumping ------------------------------------------------------------------- Thu Mar 14 09:30:04 UTC 2013 - meissner@suse.com - use source url ------------------------------------------------------------------- Wed Mar 13 22:44:29 UTC 2013 - crrodriguez@opensuse.org - version 0.7.3 - Make file opens use the cloexec flag (Cristian Rodríguez) - Add CAP_BLOCK_SUSPEND - Fix possible segfaults when CAP_LAST_CAP is larger than the lookup table - In pscap, don't drop capabilities when running with capabilities - Add CAP_COMPROMISE_KERNEL - Define FTW_CONTINUE in case its not defined in libc - Use glibc for xattr.h if available - Make sure stderr is used consistently in utils - Fix logic causing file based capabilities to not be supported when it should ------------------------------------------------------------------- Sun Feb 12 17:24:55 UTC 2012 - crrodriguez@opensuse.org - Move libraries back to %{_libdir}, /usr merge project ------------------------------------------------------------------- Wed Oct 5 15:06:00 UTC 2011 - uli@suse.com - cross-build workaround: make sure no attempt is made to build python stuff even if it's installed on the host system ------------------------------------------------------------------- Wed Aug 31 01:49:59 UTC 2011 - crrodriguez@opensuse.org - Update to version 0.6.6 - Add CAP_SYSLOG and CAP_WAKE_ALARM (needed for newish kernels) ------------------------------------------------------------------- Mon Nov 8 14:06:01 UTC 2010 - coolo@novell.com - fix requires ------------------------------------------------------------------- Wed Nov 3 21:56:17 UTC 2010 - pascal.bleser@opensuse.org - update to 0.6.5: * works around a problem in the Linux 2.6.36 kernel headers * fixes a segfault when using filecap on a specific file ------------------------------------------------------------------- Thu Oct 14 11:18:28 UTC 2010 - coolo@novell.com - split out python packages now that libcap-ng is used in many low level tools it creates cycles ------------------------------------------------------------------- Thu May 6 17:55:55 UTC 2010 - pascal.bleser@opensuse.org - update to 0.6.4: * the library now uses kernel thread ID for capget/set calls * a display problem of filesystem based capabilities was fixed * netcap now prints device name for packet socket apps - add baselibs.conf to build libcap-ng0-32bit ------------------------------------------------------------------- Fri Mar 12 10:01:51 UTC 2010 - pascal.bleser@opensuse.org - update to 0.6.3: * in netcap and pscap use the effective uid * in capng_change_id, only retain setpcap if clearing the bounding set - add rpmlintrc to disable false positive warnings - symlink license files on openSUSE ------------------------------------------------------------------- Wed Mar 10 16:02:51 UTC 2010 - prusnak@suse.cz - fixed Requires of python subpackage ------------------------------------------------------------------- Fri Feb 26 12:14:04 UTC 2010 - prusnak@suse.cz - imported package from Fedora (version 0.6.2)