2021-12-10 10:12:55 +01:00
|
|
|
-------------------------------------------------------------------
|
Accepting request 975729 from home:polslinux:branches:security
- Update to 0.8.3:
* Add vararg support to python bindings for capng_updatev
* Add support for ambient capabilities
* Add support for V3 filesystem capabilities
* If procfs is not available, leave last_cap as CAP_LAST_CAP
* If bounding and ambient not found in status, try prctl method
* In capng_apply, move ambient caps to the end of the transaction
* In capng_apply, return errors more aggressively.
* In capng_apply, if the action includes the bounding set,resync with the kernel
* Fix signed/unsigned warning in cap-ng.c
* In capng_apply, return a unique error code to diagnose any failure
* In capng_have_capability, return 0 for failure
* Add the libdrop_ambient admin tool
* In capng_apply, if we blew up in bounding set, allow setting capabilities
* If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
* Improve last_cap check
* Fix parameters to capng_updatev python bindings to be signed
* Detect capability options at runtime to make containerization easier (ntkme)
* Initialize the library when linked statically
* Add gcc function attributes for deallocation
- Update to 0.8.3:
* Add vararg support to python bindings for capng_updatev
* Add support for ambient capabilities
* Add support for V3 filesystem capabilities
* If procfs is not available, leave last_cap as CAP_LAST_CAP
* If bounding and ambient not found in status, try prctl method
* In capng_apply, move ambient caps to the end of the transaction
* In capng_apply, return errors more aggressively.
* In capng_apply, if the action includes the bounding set,resync with the kernel
OBS-URL: https://build.opensuse.org/request/show/975729
OBS-URL: https://build.opensuse.org/package/show/security/libcap-ng?expand=0&rev=40
2022-05-16 10:32:13 +02:00
|
|
|
Mon May 9 06:59:13 UTC 2022 - Paolo Stivanin <info@paolostivanin.com>
|
|
|
|
|
|
|
|
|
|
- Update to 0.8.3:
|
|
|
|
|
* Add vararg support to python bindings for capng_updatev
|
|
|
|
|
* Add support for ambient capabilities
|
|
|
|
|
* Add support for V3 filesystem capabilities
|
|
|
|
|
* If procfs is not available, leave last_cap as CAP_LAST_CAP
|
|
|
|
|
* If bounding and ambient not found in status, try prctl method
|
|
|
|
|
* In capng_apply, move ambient caps to the end of the transaction
|
|
|
|
|
* In capng_apply, return errors more aggressively.
|
|
|
|
|
* In capng_apply, if the action includes the bounding set,resync with the kernel
|
|
|
|
|
* Fix signed/unsigned warning in cap-ng.c
|
|
|
|
|
* In capng_apply, return a unique error code to diagnose any failure
|
|
|
|
|
* In capng_have_capability, return 0 for failure
|
|
|
|
|
* Add the libdrop_ambient admin tool
|
|
|
|
|
* In capng_apply, if we blew up in bounding set, allow setting capabilities
|
|
|
|
|
* If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
|
|
|
|
|
* Improve last_cap check
|
|
|
|
|
* Fix parameters to capng_updatev python bindings to be signed
|
|
|
|
|
* Detect capability options at runtime to make containerization easier (ntkme)
|
|
|
|
|
* Initialize the library when linked statically
|
|
|
|
|
* Add gcc function attributes for deallocation
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2021-12-10 10:12:55 +01:00
|
|
|
Thu Dec 9 22:05:19 UTC 2021 - Ferdinand Thiessen <rpm@fthiessen.de>
|
|
|
|
|
|
|
|
|
|
- Update to 0.7.11
|
|
|
|
|
* Really clear bounding set if asked in capng_change_id
|
|
|
|
|
* Add CAP_PERFMON, CAP_BPF, & CAP_CHECKPOINT_RESTORE
|
|
|
|
|
* Avoid malloc/free in capng_apply (Natanael Copa)
|
|
|
|
|
* If procfs is not available, get bounding set via prctl
|
|
|
|
|
|
2020-05-12 16:19:06 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue May 12 12:33:10 UTC 2020 - Paolo Stivanin <info@paolostivanin.com>
|
|
|
|
|
|
|
|
|
|
- Update to 0.7.10:
|
|
|
|
|
* Update capng_change_id man page
|
|
|
|
|
* Add capng_have_permitted_capabilities function
|
|
|
|
|
* Update filecap to output which set the capabilities are in
|
|
|
|
|
* Fix filecap to not output an error when a file has no capabilities
|
|
|
|
|
* Add udplite support to netcap
|
|
|
|
|
* Fix usage of pthread_atfork (Joe Orton)
|
|
|
|
|
* Mark processes in child user namespaces with * (Danila Kiver)
|
|
|
|
|
|
2018-02-20 11:29:37 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Feb 20 10:28:46 UTC 2018 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Switch to singlespec approach to allow building of python3
|
|
|
|
|
bindings
|
|
|
|
|
|
2018-02-19 09:04:27 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Feb 18 12:13:56 UTC 2018 - jengelh@inai.de
|
|
|
|
|
|
|
|
|
|
- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
|
|
|
|
|
- Rename %soname to %sover to better reflect its use.
|
|
|
|
|
|
2018-02-18 10:52:15 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Feb 18 09:22:44 UTC 2018 - avindra@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Update to version 0.7.9:
|
|
|
|
|
* Fix byte compiling python3 bindings
|
|
|
|
|
* Rework spec file to show new python2/3 separation
|
|
|
|
|
- cleanup with spec-cleaner
|
|
|
|
|
- use https urls
|
|
|
|
|
|
2015-12-07 15:31:35 +01:00
|
|
|
-------------------------------------------------------------------
|
2017-05-17 14:23:16 +02:00
|
|
|
Thu May 17 16:46:07 UTC 2017 - alexander_naumov@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Update to version 0.7.8:
|
|
|
|
|
* Improve Python3 support
|
|
|
|
|
* Fix the thread separation test
|
|
|
|
|
* Correct typo in cap_pacct text
|
|
|
|
|
* Update man page for captest
|
|
|
|
|
* Fix sscanf string lengths in netcap
|
|
|
|
|
* Correct linking of python3 module
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2015-12-07 15:31:35 +01:00
|
|
|
Mon Dec 7 14:31:06 UTC 2015 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Fix build by passing --without-python3 argument. For now we are
|
|
|
|
|
fine with py2 bindings only
|
|
|
|
|
|
2015-12-02 19:38:19 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Dec 2 14:29:55 UTC 2015 - p.drouand@gmail.com
|
|
|
|
|
|
|
|
|
|
- Update to version 0.7.7
|
|
|
|
|
* Make sure all types used in _lnode are defined in proc-llist.h
|
|
|
|
|
* Fix python binding test for old kernels
|
|
|
|
|
* Fix leaked FD in library init
|
|
|
|
|
- Changes from version 0.7.6
|
|
|
|
|
* Fix python3 support
|
|
|
|
|
- Changes from version 0.7.5
|
|
|
|
|
* Make python3 supported
|
|
|
|
|
* In python bindings test, clamp CAP_LAST_CAP with /proc/.../cap_last_cap
|
|
|
|
|
* Update table for 3.16 kernel
|
|
|
|
|
|
2013-03-14 10:30:37 +01:00
|
|
|
-------------------------------------------------------------------
|
2014-05-15 15:27:52 +02:00
|
|
|
Thu May 15 13:19:57 UTC 2014 - tchvatal@suse.com
|
|
|
|
|
|
|
|
|
|
- Version bupm to 0.7.4
|
|
|
|
|
- Cleanup with spec-cleaner
|
|
|
|
|
- Remove useless specification of attributes
|
|
|
|
|
- Really split the two spec files instead of copying them to avoid
|
|
|
|
|
the huge ifdefing.
|
|
|
|
|
+ more readable
|
|
|
|
|
- version must be edited in two places when bumping
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Mar 14 09:30:04 UTC 2013 - meissner@suse.com
|
2013-03-14 10:30:37 +01:00
|
|
|
|
|
|
|
|
- use source url
|
|
|
|
|
|
2012-02-12 21:49:20 +01:00
|
|
|
-------------------------------------------------------------------
|
2013-03-14 10:28:40 +01:00
|
|
|
Wed Mar 13 22:44:29 UTC 2013 - crrodriguez@opensuse.org
|
|
|
|
|
|
|
|
|
|
- version 0.7.3
|
|
|
|
|
- Make file opens use the cloexec flag (Cristian Rodríguez)
|
|
|
|
|
- Add CAP_BLOCK_SUSPEND
|
|
|
|
|
- Fix possible segfaults when CAP_LAST_CAP is larger than the lookup table
|
|
|
|
|
- In pscap, don't drop capabilities when running with capabilities
|
|
|
|
|
- Add CAP_COMPROMISE_KERNEL
|
|
|
|
|
- Define FTW_CONTINUE in case its not defined in libc
|
|
|
|
|
- Use glibc for xattr.h if available
|
|
|
|
|
- Make sure stderr is used consistently in utils
|
|
|
|
|
- Fix logic causing file based capabilities to not be supported when it should
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Feb 12 17:24:55 UTC 2012 - crrodriguez@opensuse.org
|
2012-02-12 21:49:20 +01:00
|
|
|
|
|
|
|
|
- Move libraries back to %{_libdir}, /usr merge project
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Oct 5 15:06:00 UTC 2011 - uli@suse.com
|
|
|
|
|
|
|
|
|
|
- cross-build workaround: make sure no attempt is made to build
|
|
|
|
|
python stuff even if it's installed on the host system
|
|
|
|
|
|
2011-08-31 04:34:50 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Aug 31 01:49:59 UTC 2011 - crrodriguez@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Update to version 0.6.6
|
|
|
|
|
- Add CAP_SYSLOG and CAP_WAKE_ALARM (needed for newish kernels)
|
|
|
|
|
|
2010-11-08 16:03:36 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Nov 8 14:06:01 UTC 2010 - coolo@novell.com
|
|
|
|
|
|
|
|
|
|
- fix requires
|
|
|
|
|
|
2010-11-03 23:01:40 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Nov 3 21:56:17 UTC 2010 - pascal.bleser@opensuse.org
|
|
|
|
|
|
|
|
|
|
- update to 0.6.5:
|
|
|
|
|
* works around a problem in the Linux 2.6.36 kernel headers
|
|
|
|
|
* fixes a segfault when using filecap on a specific file
|
|
|
|
|
|
2010-11-02 16:42:38 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 14 11:18:28 UTC 2010 - coolo@novell.com
|
|
|
|
|
|
|
|
|
|
- split out python packages now that libcap-ng is used in many
|
|
|
|
|
low level tools it creates cycles
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu May 6 17:55:55 UTC 2010 - pascal.bleser@opensuse.org
|
|
|
|
|
|
|
|
|
|
- update to 0.6.4:
|
|
|
|
|
* the library now uses kernel thread ID for capget/set calls
|
|
|
|
|
* a display problem of filesystem based capabilities was fixed
|
|
|
|
|
* netcap now prints device name for packet socket apps
|
|
|
|
|
|
|
|
|
|
- add baselibs.conf to build libcap-ng0-32bit
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Mar 12 10:01:51 UTC 2010 - pascal.bleser@opensuse.org
|
|
|
|
|
|
|
|
|
|
- update to 0.6.3:
|
|
|
|
|
* in netcap and pscap use the effective uid
|
|
|
|
|
* in capng_change_id, only retain setpcap if clearing the bounding set
|
|
|
|
|
|
|
|
|
|
- add rpmlintrc to disable false positive warnings
|
|
|
|
|
|
|
|
|
|
- symlink license files on openSUSE
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 10 16:02:51 UTC 2010 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- fixed Requires of python subpackage
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Feb 26 12:14:04 UTC 2010 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- imported package from Fedora (version 0.6.2)
|
|
|
|
|
|
