From 740a74df87a300daf6b5ad997970fedf28e4af682e4e4a9a6574760aeb9de128 Mon Sep 17 00:00:00 2001 From: Sebastian Wagner Date: Mon, 9 Oct 2017 18:02:19 +0000 Subject: [PATCH] - update to version 0.2.0 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/bubblewrap?expand=0&rev=9 --- bubblewrap.changes | 17 +++++++++++++++++ bubblewrap.spec | 2 +- v0.1.8.tar.gz | 3 --- v0.2.0.tar.gz | 3 +++ 4 files changed, 21 insertions(+), 4 deletions(-) delete mode 100644 v0.1.8.tar.gz create mode 100644 v0.2.0.tar.gz diff --git a/bubblewrap.changes b/bubblewrap.changes index a333862..3ecc07b 100644 --- a/bubblewrap.changes +++ b/bubblewrap.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Mon Oct 9 17:53:37 UTC 2017 - sebix+novell.com@sebix.at + +- update to version 0.2.0 + - bwrap now automatically detects the new + user namespace restrictions in Red Hat Enterprise Linux 7.4: + bubblewrap: check for max_user_namespaces == 0. + - The most notable features are new arguments --as-pid1, and + --cap-add/--cap-drop. These were added for running systemd (or in general a + "full" init system) inside bubblewrap. But the capability options are also + useful for unprivileged callers to potentially retain capbilities inside the + sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled. + Conversely, privileged callers (uid 0) can conversely drop capabilities (without + user namespaces). Contributed by Giuseppe Scrivano. + - With --dev, add /dev/fd and /dev/core symlinks + which should improve compatibility with older software. + ------------------------------------------------------------------- Mon Sep 18 12:39:54 UTC 2017 - sebix+novell.com@sebix.at diff --git a/bubblewrap.spec b/bubblewrap.spec index c970991..df40573 100644 --- a/bubblewrap.spec +++ b/bubblewrap.spec @@ -17,7 +17,7 @@ Name: bubblewrap -Version: 0.1.8 +Version: 0.2.0 Release: 0 Summary: Core execution tool for unprivileged containers License: LGPL-2.0+ diff --git a/v0.1.8.tar.gz b/v0.1.8.tar.gz deleted file mode 100644 index 99133fe..0000000 --- a/v0.1.8.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:64f264f1ae3d7b8fbcfb7102592d42096f41ac7edda97ce57486aa3e05d8d489 -size 98864 diff --git a/v0.2.0.tar.gz b/v0.2.0.tar.gz new file mode 100644 index 0000000..6278d06 --- /dev/null +++ b/v0.2.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:50d612a2775e402105e26f8a9ab4ed314c7ba65ff85d4d051e96970b7136e99c +size 61025