libcap-2.33 (wait for lfs)

[Bruce Dubbs]

New minor version.

[Bruce Dubbs]

Now version 2.33.

[Bruce Dubbs]

Release notes for 2.33 posted Feb 23, 2020

• This release implements cap_launch functionality
  • cap_launch is a feature that will launch (fork+exec) a new program in such a way that it can inherit capabilities and a mode not held by the parent and without changing those of the parent.
  • This feature is available in C as cap_launch() and in Go as cap.(*cap.Launcher).Launch()
• It also introduces an IAB abstraction for the three inherited flavors of capability vector:
  • the I (inheritable set) of cap_t
  • the A (ambient) alternative to file capabilities
  • the B (blocking) vector [which is implemented as the inverse of the kernel's bounding set].
• pam_cap uses the above IAB abstraction instead of its own config parsing.
• libpsx now does sane things when the program fork()s. Namely the child experiences a single threaded libcap, but the parent continues to treat all threads as having a shared privilege state.
• Text format fix for getcap error output.

[Bruce Dubbs]

Fixed at revision 22784.

[Bruce Dubbs]

Milestone renamed

[Bruce Dubbs]

Milestone renamed