Opened 20 months ago

Closed 19 months ago

Last modified 15 months ago

#13143 closed enhancement (fixed)

libcap-2.33 (wait for lfs)

Reported by: Bruce Dubbs Owned by: Bruce Dubbs
Priority: normal Milestone: 10.0
Component: BOOK Version: SVN
Severity: normal Keywords:
Cc:

Description

New minor version.

Change History (7)

comment:1 by Pierre Labastie, 20 months ago

Summary: libcap-2.32libcap-2.32 (wait for lfs)

comment:2 by Bruce Dubbs, 19 months ago

Owner: changed from blfs-book to Bruce Dubbs
Status: newassigned

comment:3 by Bruce Dubbs, 19 months ago

Summary: libcap-2.32 (wait for lfs)libcap-2.33 (wait for lfs)

Now version 2.33.

comment:4 by Bruce Dubbs, 19 months ago

Release notes for 2.33 posted Feb 23, 2020

  • This release implements cap_launch functionality
    • cap_launch is a feature that will launch (fork+exec) a new program in such a way that it can inherit capabilities and a mode not held by the parent and without changing those of the parent.
    • This feature is available in C as cap_launch() and in Go as cap.(*cap.Launcher).Launch()
  • It also introduces an IAB abstraction for the three inherited flavors of capability vector:
    • the I (inheritable set) of cap_t
    • the A (ambient) alternative to file capabilities
    • the B (blocking) vector [which is implemented as the inverse of the kernel's bounding set].
  • pam_cap uses the above IAB abstraction instead of its own config parsing.
  • libpsx now does sane things when the program fork()s. Namely the child experiences a single threaded libcap, but the parent continues to treat all threads as having a shared privilege state.
  • Text format fix for getcap error output.

comment:5 by Bruce Dubbs, 19 months ago

Resolution: fixed
Status: assignedclosed

Fixed at revision 22784.

comment:6 by Bruce Dubbs, 15 months ago

Milestone: 9.210,0

Milestone renamed

comment:7 by Bruce Dubbs, 15 months ago

Milestone: 10,010.0

Milestone renamed

Note: See TracTickets for help on using tickets.