libcap2-2.63-150400.3.3.1 < > , < dAp9|! M,Xvk1`JeE/;fHfކ(Ĕk.SxNX$/-q_ fZۆ9ESTmE̊ /gkb}Ƨ lhPܑ; CCH1S~⥫8,4 lps '_{Wr@,]sHp8^UCzbL{w#\ Tå9
R IH& (_v&K{1 yCUFb`Ji/M > @ 1 ? 1 d
K 3 I Z
H
\ l 0 ( 8 9 $ : > - @ - F - G . H . I .( X ., Y .8 \ .` ] .p ^ . b . c / d 0 e 0 f 0 l 0
u 0 v 00 w 0 x 1 y 1 z 1@ 1P 1T 1Z 1 C libcap2 2.63 150400.3.3.1 Library for Capabilities (linux-privs) Support Capabilities are a measure to limit the omnipotence of the superuser.
Currently a program started by root or setuid root has the power to do
anything. Capabilities (Linux-Privs) provide a more fine-grained access
control. Without kernel patches, you can use this library to drop
capabilities within setuid binaries. If you use patches, this can be
done automatically by the kernel. dAsheep25 SUSE Linux Enterprise 15 SUSE LLC BSD-3-Clause OR GPL-2.0-only https://www.suse.com/ System/Libraries https://sites.google.com/site/fullycapable/ linux x86_64 O!A큤 d>d>d@`* d7a789cb4b47d7f085e21266ec656e49ca8b75e403a3e4c8d1bcea778818dbe5 f58c80bcce8c929db39a23c32e924876e3311f3ffa54f66076c38056d38fa59b libcap.so.2.63 root root root root root root root root libcap-2.63-150400.3.3.1.src.rpm libcap.so.2()(64bit) libcap2 libcap2(x86-64) @ @ @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.8)(64bit) libc.so.6(GLIBC_2.9)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 dcp@ba@a͟@a4aS`@`r`y|@`X`"y@`U_@__O@_+^G@^0"@^ [^]qZX|@Xh@W#Tabergmann@suse.com meissner@suse.com dmueller@suse.com dmueller@suse.com andreas.stieger@gmx.de info@paolostivanin.com dmueller@suse.com christophe@krop.fr tiwai@suse.de dmueller@suse.com dmueller@suse.com dmueller@suse.com dmueller@suse.com dmueller@suse.com dmueller@suse.com info@paolostivanin.com tiwai@suse.de tiwai@suse.de mpluskal@suse.com mpluskal@suse.com matthias.gerstner@suse.com fvogt@suse.com matwey.kornilov@gmail.com jengelh@inai.de dimstar@opensuse.org p.drouand@gmail.com - Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
(bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
(bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch - Use "or" in the license tag to avoid confusion (bsc#1180073) - update to 2.63:
* restore errno to zero by the time main() is executed
* Consistent psx handling (a panic) for syscalls that return thread dependent
status Inconsistend behavior noticed by Lorenz Bauer
* Add a test case for a deadlock under investigation in golang
* Trim some of the #include file use to make the tree compile more
efficiently - update to 2.62:
* Bug fix for Go package "cap" and launching
* Build cleanups
* Documentation updates: cap_max_bits has a man page entry
* Recognize default securebits as a libcap mode: HYBRID - libcap 2.61:
* Better error handling of the numerical arguments for capsh and
setcap
* Fix executable mode for all of the .so files. There were two
situations where this was failing (with a hard to debug SIGSEGV
inside libc)
* Added an example of a shared library object with its own file
capability
* Fix the top-level include for Make.Rules in the contrib/sucap
example application
* Add support for running constructors at libcap.so start up time
when running as stand alone binary.
- includes changes from 2.60:
* Some build, code linting fixes, the addition of the
cap_fill_flag() API and a memory latency optimization
* General improvement in thread safety for libcap and cap package
* Minor API change replacing libcap:cap_launch_*() void returning
functions with int + errno status returns.
* Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
* New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature - update to 2.59:
* Fixed a potential libcap memory leak by adding a destructor
* Major improvement is that there is a path for Linux-PAM compliant
applications to support setting Ambient vector Capabilities via pam_cap.so now
* Added libcap cap_proc_root() API function
* Added color support to captree
* Fixed contrib/sucap/su to correctly handle the Inheritable flag
* capsh enhancements
* getcap -r / now generates readable output
* The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
runnable as standalone binaries
* The module pam_cap.so now contains support for a default= module argument
* Enhanced capsh --suggest to also compare against the capability value names
and not just their descriptions
* Added capsh --current support
* Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
* Fix for a corner case infinite loop handling long strings
* Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
* Added a Go utility, captree, to display the process (and thread) graph along with
the POSIX.1e and IAB capabilities of each PID{TID} tree. - update to 2.51:
* Fix capsh installation
* Add an autoauth module flag to pam_cap.so
* Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
* API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
capability flag to another.
* --explain=cap_foo: describe what cap_foo does
* --suggest=phrase: search all the cap descriptions and describe those that match the phrase
* Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
* extend libcap to include cap_prctl() and cap_prctlw() functions to regain
feature parity with Go "cap" package. These are only needed when linking
against -lpsx for keepcaps POSIX semantics.
* this likely requires substantial application changes to make Ambient
capability support usable in general, but doing our part for the admin.
* Add a test case for recent kernel fix
* Go pragma fix for convenience functions in "cap" module - Fix a broken symlink. libcap-devel installs libpsx.so but
didn't install the library it's pointing to. - Add explicit dependency on libcap2 with version to libcap-progs
(bsc#1184690) - update to 2.49:
* Implement cap_func_launcher() and cap.FuncLauncher().
* More robust "psx" redirection for nocgo compilation - the documentation for
the cgo implementation is now included in the nocgo one because the go.dev
automated documentation builds the docs from the nocgo version.
* Lots of documentation cleanups and added a few man pages: for IAB and
Launching.
* Some general no-op License changes that might cause folk to notice but only
for formatting reasons. These were initially inspired by some lawyerly
interactions, but I ended up rolling back half of them because they
confused automated software infrastructure. - update to 2.48:
* More uniform use of $(MAKE) in Makefiles
* No longer include symlinks in the git tree
* Provide support for make GOLANG=no ...
* Provide support for pointing at a specific build of the go binary
* camelCase the contrib/seccomp/explore.go program
* A number of documentation fixes to man pages and source code comments
* Last use of GO major version 0 - update to 2.47:
* Restructured gowns to default to uid base of getuid().
* Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
* Improve the usage and diagnostic message for setcap
* Documentation fixes, license declarations, example updates - update to 2.46:
* The bulk of this release concerns fixes and improvements to libpsx
* Fix the capsh == argument handling and add a test case
* Added build support for systems that do not support libpthread
* Added build support for not building shared libraries - update to 2.44:
Generally, this is a release to help package builders: no functional change
to any of the generated code just documentation and make related fixes. - update to 2.43
* Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
* Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
* Clean up a binary from the distribution
* Added some more release time checks for non-git tracked files.
* Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder. - Update to version 2.42:
* Closed a potential issue with "libcap/psx" Go package and errno
* Documentation updates
* Minor optimization for cap_to_text() and (*cap.Set).String()
* Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
* Multiple fixes
* Support Go module abstraction
* A new kernel capability: CAP_BPF
* Better support for cross-compilation
* pam_cap now honors PAM_REINITIALIZE_CRED
* implements cap_launch functionality - Update to version 2.32:
* Bug fix for fakeroot incompatibility (boo#1162014)
* Slight perf improvement for cap_get_bound().
* C++ support for psx header inclusion.
* Some new testing features for capsh - Update to version 2.31:
* primarily a documentation update
* fix libpam.pc to not require libpsx.pc
* changed the text format of the default output of getpcap - Build using -ffat-lto-objects for static library - Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
* BUGFIX: arm and i386 fixes C and Go setgroups choice - used
wrong syscall in 2.29.
* cleaned up make clean and make install to actually work as
intended
* updated Gentoo libpsx.pc file from Lars Wendler
* refactored the way libpsx linkage with libcap performed mutual
discovery.
* Previously (2.28) libpsx had an API call overridden by libcap
using weak linkage function in libpsx. In 2.30 this is reversed,
namely libpsx provides the stronger function and libcap has a
weak "no-op" version.
* a bit more consistency in handling the 'all' sets in libcap
(C) and libcap/cap (Go). Namely, they both dynamically discover
the number of capabilities named by the kernel and use this as
the definition of 'all' for the current runtime.
+ libcap (C) exports cap_max_bit() to export the number of
supported capabilities
+ libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
* https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
* https://bugs.gentoo.org/703912 - Remove pam_cap (bsc#1150522) since this PAM module is a bad idea, security
wise. - Use %license (boo#1082318) - Enable PAM pam_cap.so module - RPM group association fix - Update to versison 2.25:
+ Recover gperf detection in make rules.
+ Man page typo fix.
+ Tweak make rules to make packaging more straightforward.
+ Fix error explanation in setcap.
+ Drop need to link with libattr. It turns out libcap wasn't
actually using any code from that library, so linking to it was
superfluous.
- Drop libcap-nolibattr.patch: fixed upstream.
- No longer add %{buildroot} to all variables for make install the
Makefile learned about the meaning of DESTDIR. - Update to version 2.24
* Fix compilation problems (note to self, make distclean && make,
before release)
* Some make rule changes to make uploading a release to kernel.org
easier for me.
* Tidied up some documented links.
- Update libcap-nolibattr.patch
- Add pkg-config build requirement; libcap now provides a pkgconfig
file
- Clean up specfile
- Move libraries and binaries to /usr because of #UsrMove /sbin/ldconfig /sbin/ldconfig sheep25 1687791937 2.63-150400.3.3.1 2.63-150400.3.3.1 libcap.so.2 libcap.so.2.63 libcap2 License /usr/lib64/ /usr/share/licenses/ /usr/share/licenses/libcap2/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:29616/SUSE_SLE-15-SP4_Update/acc1a57c9c21449596cf148fbbfeb63b-libcap.SUSE_SLE-15-SP4_Update drpm xz 5 x86_64-suse-linux ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=1b0832431bbde63d8d5a5ef90bbba20dea46bbed, stripped directory ASCII text P R R R R R R R R MĠlXۿ: utf-8 5e00622d2a042bd1de49d09e52c330d7a2662a20876f3529b3584e2c14ecad5c ? 7zXZ
! t/oh] "k%jjdB5BX,u SC͔c2{k#xgzi!w4Pg]a `l߁չẃ M fՎK6,1j>nY?})85~ NO$ysC+j(n/D4{9K=9/Ӊ.
NĈ m>^4f-Chm'F0rg
)K2M kv %ӱt__#a<}ۭ̀A4 1\x~&sϕEZph]qt${ in}.運 Vz3hׇ"oB$n{&֠s,m뽙u#j3i&3BB,2a%^* 6 Xܤ 96+۰AV\*;R}|RQddžvq)atôW m_mlbLQˁ'A{sWzkw1>
|mj^v$m;~ 6#p ˒2qP Yﴉ{AשN\kdD&8Qh.GX'd>D
N\f̈~ʹl1Ԯ (Xя=b !ӣ5TDmm{Db
i%t
x2x
۬vgy DJIaVx6 T/ݒu R+@oQeNr K ApV3]c,F%i ø kp?ٛk"hgQSDUw)|T=a fDzC,b4.b2LBEih#Vt;"τiAu t[v~2?2' n): PeE,C5bHz(p2)(U i^
J 5d~b&)A`
ѶADVat'z"ʣ^qFF/ {[ tV0J)TEXۥw~\r]9wAM ['2Іu{Zŷ|5nq DhDII>{ԺcϗƼ#L #(}/)秈Y8]y_;
sJ%}$D
Y:C2C(ה\;~[/ QV~^Mn&\G}gO19,htH˩YP8a| dOLbk|ܙ*xpXhoq߳lO7z?`4eG#ۙ ~)$?H0?C:P'Jܓ";@)؈B:TRI)Pϱ.6ա+GPzd^}Vi;c)%|t˼d<CMe\wNeY& CBxFS $a,AF|9K;chG Ѵ[pp\fw}qR$= RTE>F4ңLyj"l<3mnos,esf& hMT my¾Tɳhq?
.
YZ