From mboxrd@z Thu Jan 1 00:00:00 1970 From: Adolf Belka To: development@lists.ipfire.org Subject: [PATCH] libcap: Update to version 2.66 Date: Tue, 27 Dec 2022 12:59:54 +0100 Message-ID: <20221227120002.12161-3-adolf.belka@ipfire.org> In-Reply-To: <20221227120002.12161-1-adolf.belka@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============0696926299659754967==" List-Id: --===============0696926299659754967== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable - Update from version 2.64 to 2.66 - Update of rootfile - Changelog Release notes for 2.66 Fix documentation typos in cap_from_text.3 (Bug: 216514 reported by Paulo Andrade.) Some getpcaps code clean up and a fix for PID argument parsing from Jaku= b Wilk. Slightly more robust Makefiles to address an error with make -j48 test observed by Tomasz K=C5=82oczko. Include a simple Go program, captrace, to trace kernel capability valida= tion checks This program can be used to figure out what capabilities a program n= eeds to operate. captrace (a wrapper for bpftrace) uses BPF kprobes to monitor the ke= rnel for capability checks and whether or not they succeed for th= e system, a specific PID or a program's direct execution. Trim down the default file capabilities for contrib/sucap/su to those actually needed and set USER and HOME environment variables so b= ash doesn't complain about a sourcing error. Release notes for 2.65 Fix syntax error in DEBUG build of protected code in setcap.c. (Bug repo= rted by yixiangzhike.) Prevent bash from reading the wrong startup files when the capsh --user= =3Dxxx argument is used to invoke a shell as the user xxx. This is done= by capsh now changing the USER and HOME environment variables when --user= is specified. The argument --noenv can be used to suppress this beh= avior to what used to be the problematic default. (Bug: 215926) Improved documentation: Man page info for cap_get_pid() and cap_reset_ambient(). (Bug reports from nomonemo and Tinkerer One.) Improve documentation and help for the captree program. Updated go/Makefile comment about an unfixed Go runtime bug in go1.16 and go1.17 (resolved in go1.18+), and the deadlock behavior of the p= sx-fd test. Refresh the signatures on the two GPG keys morgan@ uses. The 4096 bit on= e is preferred, but the older one is also used for continuity reasons= . This set of signatures should also be available from the various key serv= ers out there. Signed-off-by: Adolf Belka --- config/rootfiles/common/libcap | 4 ++-- lfs/libcap | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/config/rootfiles/common/libcap b/config/rootfiles/common/libcap index 1e104acf6..f0518d6aa 100644 --- a/config/rootfiles/common/libcap +++ b/config/rootfiles/common/libcap @@ -1,8 +1,8 @@ lib/libcap.so.2 -lib/libcap.so.2.64 +lib/libcap.so.2.66 #lib/libpsx.so #lib/libpsx.so.2 -lib/libpsx.so.2.64 +lib/libpsx.so.2.66 #lib/pkgconfig/libcap.pc #lib/pkgconfig/libpsx.pc lib/security/pam_cap.so diff --git a/lfs/libcap b/lfs/libcap index 21facbe01..f81b13c99 100644 --- a/lfs/libcap +++ b/lfs/libcap @@ -1,7 +1,7 @@ ############################################################################= ### # = # # IPFire.org - A linux based firewall = # -# Copyright (C) 2007-2021 IPFire Team = # +# Copyright (C) 2007-2022 IPFire Team = # # = # # This program is free software: you can redistribute it and/or modify = # # it under the terms of the GNU General Public License as published by = # @@ -24,7 +24,7 @@ =20 include Config =20 -VER =3D 2.64 +VER =3D 2.66 =20 THISAPP =3D libcap-$(VER) DL_FILE =3D $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects =3D $(DL_FILE) =20 $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE) =20 -$(DL_FILE)_BLAKE2 =3D 078ce2505a79c1bd4ca0a8eaf3444178bc19a566f0505d28c6959f= 86fbbac2fe2fc88c06fd0d988087a6e20e8ec66a2633146cea957f0f3fd92eaff4f81d7c66 +$(DL_FILE)_BLAKE2 =3D e79bf10c6a3dbffe96dc97aad0bed67caa0b3805d9dcaff1e4a8a8= 33396ee5c6da4f7f0d321b254e99a00073bc39021b9f3a4b350d93094d0df4d74889b3ca56 =20 install : $(TARGET) =20 @@ -75,7 +75,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) cd $(DIR_APP) && make GOLANG=3Dno cd $(DIR_APP) && make install GOLANG=3Dno rm -vf /lib/libcap.so - ln -svf /lib/libcap.so.2.64 /usr/lib/libcap.so + ln -svf /lib/libcap.so.2.66 /usr/lib/libcap.so chmod +x /lib/libcap.so.* @rm -rf $(DIR_APP) @$(POSTBUILD) --=20 2.39.0 --===============0696926299659754967==--