| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: libdrop_ambient0 | Distribution: SUSE Linux Framework One |
| Version: 0.8.3 | Vendor: SUSE LLC <https://www.suse.com/> |
| Release: slfo.1.1.7 | Build date: Fri Aug 23 16:41:32 2024 |
| Group: Development/Libraries/C and C++ | Build host: h01-armsrv2 |
| Size: 67440 | Source RPM: libcap-ng-0.8.3-slfo.1.1.7.src.rpm |
| Packager: https://www.suse.com/ | |
| Url: https://people.redhat.com/sgrubb/libcap-ng | |
| Summary: Library for dropping ambient capabilities | |
This library can be used via LD_PRELOAD to force an application started with ambient capabilities to drop them. It leaves other capabilities intact. This can also be linked against and automatically does the right thing. You do not need to make any calls into the library because all the work is done in the constructor which runs before main() is called.
LGPL-2.1-or-later
* Thu May 04 2023 fcrozat@suse.com
- Add _multibuild to define additional spec files as additional
flavors.
Eliminates the need for source package links in OBS.
* Mon May 09 2022 info@paolostivanin.com
- Update to 0.8.3:
* Add vararg support to python bindings for capng_updatev
* Add support for ambient capabilities
* Add support for V3 filesystem capabilities
* If procfs is not available, leave last_cap as CAP_LAST_CAP
* If bounding and ambient not found in status, try prctl method
* In capng_apply, move ambient caps to the end of the transaction
* In capng_apply, return errors more aggressively.
* In capng_apply, if the action includes the bounding set,resync with the kernel
* Fix signed/unsigned warning in cap-ng.c
* In capng_apply, return a unique error code to diagnose any failure
* In capng_have_capability, return 0 for failure
* Add the libdrop_ambient admin tool
* In capng_apply, if we blew up in bounding set, allow setting capabilities
* If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
* Improve last_cap check
* Fix parameters to capng_updatev python bindings to be signed
* Detect capability options at runtime to make containerization easier (ntkme)
* Initialize the library when linked statically
* Add gcc function attributes for deallocation
* Thu Dec 09 2021 rpm@fthiessen.de
- Update to 0.7.11
* Really clear bounding set if asked in capng_change_id
* Add CAP_PERFMON, CAP_BPF, & CAP_CHECKPOINT_RESTORE
* Avoid malloc/free in capng_apply (Natanael Copa)
* If procfs is not available, get bounding set via prctl
- Removed unneeded rules from rpmlintrc
* Tue May 12 2020 info@paolostivanin.com
- Update to 0.7.10:
* Update capng_change_id man page
* Add capng_have_permitted_capabilities function
* Update filecap to output which set the capabilities are in
* Fix filecap to not output an error when a file has no capabilities
* Add udplite support to netcap
* Fix usage of pthread_atfork (Joe Orton)
* Mark processes in child user namespaces with * (Danila Kiver)
* Thu Aug 08 2019 dimstar@opensuse.org
- Own %{_datadir}/aclocal: when we might switch to pkgconf instead
of pkg-config, nothing in the build root is 'accidentally' owning
this directory for us.
* Tue Feb 20 2018 tchvatal@suse.com
- Move %doc to %license for licenses
* Sun Feb 18 2018 jengelh@inai.de
- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.
* Sun Feb 18 2018 avindra@opensuse.org
- Update to version 0.7.9:
* Detect and output a couple errors in filecap
* Use pthread_atfork to optionally reset the pid and related info
on fork
- cleanup with spec-cleaner
- use https urls
* Wed May 17 2017 alexander_naumov@opensuse.org
- Update to version 0.7.8:
* Improve Python3 support
* Fix the thread separation test
* Correct typo in cap_pacct text
* Update man page for captest
* Fix sscanf string lengths in netcap
* Correct linking of python3 module
* Wed Dec 02 2015 p.drouand@gmail.com
- Update to version 0.7.7
* Make sure all types used in _lnode are defined in proc-llist.h
* Fix python binding test for old kernels
* Fix leaked FD in library init
- Changes from version 0.7.6
* Fix python3 support
- Changes from version 0.7.5
* Make python3 supported
* In python bindings test, clamp CAP_LAST_CAP with /proc/.../cap_last_cap
* Update table for 3.16 kernel
* Thu Jun 19 2014 crrodriguez@opensuse.org
- Remove unused BuildRequires on libattr-devel
* Thu May 15 2014 tchvatal@suse.com
- Version bupm to 0.7.4
- Cleanup with spec-cleaner
- Remove useless specification of attributes
- Really split the two spec files instead of copying them to avoid
the huge ifdefing.
+ more readable
- version must be edited in two places when bumping
* Thu Mar 14 2013 meissner@suse.com
- use source url
* Wed Mar 13 2013 crrodriguez@opensuse.org
- version 0.7.3
- Make file opens use the cloexec flag (Cristian RodrÃguez)
- Add CAP_BLOCK_SUSPEND
- Fix possible segfaults when CAP_LAST_CAP is larger than the lookup table
- In pscap, don't drop capabilities when running with capabilities
- Add CAP_COMPROMISE_KERNEL
- Define FTW_CONTINUE in case its not defined in libc
- Use glibc for xattr.h if available
- Make sure stderr is used consistently in utils
- Fix logic causing file based capabilities to not be supported when it should
* Sun Feb 12 2012 crrodriguez@opensuse.org
- Move libraries back to %{_libdir}, /usr merge project
* Wed Oct 05 2011 uli@suse.com
- cross-build workaround: make sure no attempt is made to build
python stuff even if it's installed on the host system
* Wed Aug 31 2011 crrodriguez@opensuse.org
- Update to version 0.6.6
- Add CAP_SYSLOG and CAP_WAKE_ALARM (needed for newish kernels)
* Mon Nov 08 2010 coolo@novell.com
- fix requires
* Wed Nov 03 2010 pascal.bleser@opensuse.org
- update to 0.6.5:
* works around a problem in the Linux 2.6.36 kernel headers
* fixes a segfault when using filecap on a specific file
* Thu Oct 14 2010 coolo@novell.com
- split out python packages now that libcap-ng is used in many
low level tools it creates cycles
* Thu May 06 2010 pascal.bleser@opensuse.org
- update to 0.6.4:
* the library now uses kernel thread ID for capget/set calls
* a display problem of filesystem based capabilities was fixed
* netcap now prints device name for packet socket apps
- add baselibs.conf to build libcap-ng0-32bit
* Fri Mar 12 2010 pascal.bleser@opensuse.org
- update to 0.6.3:
* in netcap and pscap use the effective uid
* in capng_change_id, only retain setpcap if clearing the bounding set
- add rpmlintrc to disable false positive warnings
- symlink license files on openSUSE
* Wed Mar 10 2010 prusnak@suse.cz
- fixed Requires of python subpackage
* Fri Feb 26 2010 prusnak@suse.cz
- imported package from Fedora (version 0.6.2)
/usr/lib64/libdrop_ambient.so.0 /usr/lib64/libdrop_ambient.so.0.0.0
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Oct 27 00:19:17 2024