- Update to 0.8.3:
* Add vararg support to python bindings for capng_updatev
* Add support for ambient capabilities
* Add support for V3 filesystem capabilities
* If procfs is not available, leave last_cap as CAP_LAST_CAP
* If bounding and ambient not found in status, try prctl method
* In capng_apply, move ambient caps to the end of the transaction
* In capng_apply, return errors more aggressively.
* In capng_apply, if the action includes the bounding set,resync with the kernel
* Fix signed/unsigned warning in cap-ng.c
* In capng_apply, return a unique error code to diagnose any failure
* In capng_have_capability, return 0 for failure
* Add the libdrop_ambient admin tool
* In capng_apply, if we blew up in bounding set, allow setting capabilities
* If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
* Improve last_cap check
* Fix parameters to capng_updatev python bindings to be signed
* Detect capability options at runtime to make containerization easier (ntkme)
* Initialize the library when linked statically
* Add gcc function attributes for deallocation
- Update to 0.8.3:
* Add vararg support to python bindings for capng_updatev
* Add support for ambient capabilities
* Add support for V3 filesystem capabilities
* If procfs is not available, leave last_cap as CAP_LAST_CAP
* If bounding and ambient not found in status, try prctl method
* In capng_apply, move ambient caps to the end of the transaction
* In capng_apply, return errors more aggressively.
* In capng_apply, if the action includes the bounding set,resync with the kernel
OBS-URL: https://build.opensuse.org/request/show/975729
OBS-URL: https://build.opensuse.org/package/show/security/libcap-ng?expand=0&rev=40
- Update to 0.7.10:
* Update capng_change_id man page
* Add capng_have_permitted_capabilities function
* Update filecap to output which set the capabilities are in
* Fix filecap to not output an error when a file has no capabilities
* Add udplite support to netcap
* Fix usage of pthread_atfork (Joe Orton)
* Mark processes in child user namespaces with * (Danila Kiver)
OBS-URL: https://build.opensuse.org/request/show/802972
OBS-URL: https://build.opensuse.org/package/show/security/libcap-ng?expand=0&rev=37
- Switch to singlespec approach to allow building of python3
bindings
- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.
- Update to version 0.7.9:
* Fix byte compiling python3 bindings
* Rework spec file to show new python2/3 separation
- cleanup with spec-cleaner
- use https urls
- Move %doc to %license for licenses
- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.
- Update to version 0.7.9:
* Detect and output a couple errors in filecap
* Use pthread_atfork to optionally reset the pid and related info
on fork
- cleanup with spec-cleaner
- use https urls
OBS-URL: https://build.opensuse.org/request/show/578311
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libcap-ng?expand=0&rev=27
- Update to version 0.7.9:
* Fix byte compiling python3 bindings
* Rework spec file to show new python2/3 separation
- cleanup with spec-cleaner
- use https urls
- Update to version 0.7.9:
* Detect and output a couple errors in filecap
* Use pthread_atfork to optionally reset the pid and related info
on fork
- cleanup with spec-cleaner
- use https urls
OBS-URL: https://build.opensuse.org/request/show/577712
OBS-URL: https://build.opensuse.org/package/show/security/libcap-ng?expand=0&rev=31
- Fix build by passing --without-python3 argument. For now we are
fine with py2 bindings only
- Update to version 0.7.7
* Make sure all types used in _lnode are defined in proc-llist.h
* Fix python binding test for old kernels
* Fix leaked FD in library init
- Changes from version 0.7.6
* Fix python3 support
- Changes from version 0.7.5
* Make python3 supported
* In python bindings test, clamp CAP_LAST_CAP with /proc/.../cap_last_cap
* Update table for 3.16 kernel
- Update to version 0.7.7
* Make sure all types used in _lnode are defined in proc-llist.h
* Fix python binding test for old kernels
* Fix leaked FD in library init
- Changes from version 0.7.6
* Fix python3 support
- Changes from version 0.7.5
* Make python3 supported
* In python bindings test, clamp CAP_LAST_CAP with /proc/.../cap_last_cap
* Update table for 3.16 kernel
OBS-URL: https://build.opensuse.org/request/show/347793
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libcap-ng?expand=0&rev=25
- Version bupm to 0.7.4
- Cleanup with spec-cleaner
- Remove useless specification of attributes
- Really split the two spec files instead of copying them to avoid
the huge ifdefing.
+ more readable
- version must be edited in two places when bumping
- Version bupm to 0.7.4
- Cleanup with spec-cleaner
- Remove useless specification of attributes
- Really split the two spec files instead of copying them to avoid
the huge ifdefing.
+ more readable
- version must be edited in two places when bumping
OBS-URL: https://build.opensuse.org/request/show/234189
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libcap-ng?expand=0&rev=22
- Cleanup with spec-cleaner
- Remove useless specification of attributes
- Really split the two spec files instead of copying them to avoid
the huge ifdefing.
+ more readable
- version must be edited in two places when bumping
- Version bupm to 0.7.4
- Cleanup with spec-cleaner
- Remove useless specification of attributes
- Really split the two spec files instead of copying them to avoid
the huge ifdefing.
+ more readable
- version must be edited in two places when bumping
OBS-URL: https://build.opensuse.org/package/show/security/libcap-ng?expand=0&rev=22
- use source url
- version 0.7.3
- Make file opens use the cloexec flag (Cristian Rodríguez)
- Add CAP_BLOCK_SUSPEND
- Fix possible segfaults when CAP_LAST_CAP is larger than the lookup table
- In pscap, don't drop capabilities when running with capabilities
- Add CAP_COMPROMISE_KERNEL
- Define FTW_CONTINUE in case its not defined in libc
- Use glibc for xattr.h if available
- Make sure stderr is used consistently in utils
- Fix logic causing file based capabilities to not be supported when it should
- use source url
- version 0.7.3
- Make file opens use the cloexec flag (Cristian Rodríguez)
- Add CAP_BLOCK_SUSPEND
- Fix possible segfaults when CAP_LAST_CAP is larger than the lookup table
- In pscap, don't drop capabilities when running with capabilities
- Add CAP_COMPROMISE_KERNEL
- Define FTW_CONTINUE in case its not defined in libc
- Use glibc for xattr.h if available
- Make sure stderr is used consistently in utils
- Fix logic causing file based capabilities to not be supported when it should
OBS-URL: https://build.opensuse.org/request/show/159295
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libcap-ng?expand=0&rev=20
