[PATCH 01/15] libcap: Update to version 2.70

[PATCH 01/15] libcap: Update to version 2.70

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 3359 bytes --]

- Update from version 2.69 to 2.70
- Update of rootfile
- sobump means following core packages need to be shipped
   arping
   cdrkit
   iproute2
   iputils
   ntp
   squid
   udev
  and the following addons will be shipped with the pak_ver increments in the other
   patches that are part ofg this set
   avahi
   bacula
   cifs-utils
   dnsdist
   freeradius
   frr
   htop
   nfs
   rng-tools
   samba
   tor
   tshark
   vdr
   wavemon
- Changelog
   2.70
	setcap changes to make it harder to set invalid file capabilities (Bug 217592\
	 reported by parke.nexus)
	Lots of documentation fixes (contributions from Jakub Wilk and
	 Carlos Rodriguez-Fernandez)
	Fix c89 compilation syntax for the C code in the libraries.
	libpam has deprecated providing the _pam_overwrite() function, so use memset()
	 instead

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 config/rootfiles/common/libcap | 8 +++++---
 lfs/libcap                     | 6 +++---
 2 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/config/rootfiles/common/libcap b/config/rootfiles/common/libcap
index f331e2a43..ea90c7564 100644
--- a/config/rootfiles/common/libcap
+++ b/config/rootfiles/common/libcap
@@ -4,12 +4,12 @@ sbin/getpcaps
 sbin/setcap
 #usr/include/sys/capability.h
 #usr/include/sys/psx_syscall.h
-usr/lib/libcap.so
+#usr/lib/libcap.so
 usr/lib/libcap.so.2
-usr/lib/libcap.so.2.69
+usr/lib/libcap.so.2.70
 #usr/lib/libpsx.so
 #usr/lib/libpsx.so.2
-usr/lib/libpsx.so.2.69
+usr/lib/libpsx.so.2.70
 #usr/lib/pkgconfig/libcap.pc
 #usr/lib/pkgconfig/libpsx.pc
 #usr/lib/security
@@ -88,7 +88,9 @@ usr/lib/security/pam_cap.so
 #usr/share/man/man3/psx_syscall.3
 #usr/share/man/man3/psx_syscall3.3
 #usr/share/man/man3/psx_syscall6.3
+#usr/share/man/man5/capability.conf.5
 #usr/share/man/man8/captree.8
 #usr/share/man/man8/getcap.8
 #usr/share/man/man8/getpcaps.8
+#usr/share/man/man8/pam_cap.8
 #usr/share/man/man8/setcap.8
diff --git a/lfs/libcap b/lfs/libcap
index 951ed80dc..51e32f9c6 100644
--- a/lfs/libcap
+++ b/lfs/libcap
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 2.69
+VER        = 2.70
 
 THISAPP    = libcap-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 94d1fef7666a1c383a8b96f1f6092bd242164631532868b628d2f5de71b42a371d041a978ef7fbadfee3eeb433165444995d1078cd790275bc0433a7875a697e
+$(DL_FILE)_BLAKE2 = 77b72acee53032117ea481e3380d1b497f9264b6193b9523542508c7c3e46070248ca4ed910d35809ce6e52caa60cbb31edb125c47221627eeda35c61bd0914b
 
 install : $(TARGET)
 
-- 
2.45.2

[PATCH 02/15] avahi: ship due to libcap sobump

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 1144 bytes --]

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 lfs/avahi | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/avahi b/lfs/avahi
index 1df11c70e..f2c08ada6 100644
--- a/lfs/avahi
+++ b/lfs/avahi
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = avahi
-PAK_VER    = 14
+PAK_VER    = 15
 
 DEPS       = dbus libdaemon
 
-- 
2.45.2

[PATCH 03/15] bacula: ship due to libcap sobump

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 433 bytes --]

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 lfs/bacula | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lfs/bacula b/lfs/bacula
index f2a794a29..49a41e75d 100644
--- a/lfs/bacula
+++ b/lfs/bacula
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = bacula
-PAK_VER    = 13
+PAK_VER    = 14
 
 DEPS       =
 
-- 
2.45.2

[PATCH 04/15] cifs-utils: ship due to libcap sobump

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 1157 bytes --]

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 lfs/cifs-utils | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/cifs-utils b/lfs/cifs-utils
index 9301caef6..7b8a39fcd 100644
--- a/lfs/cifs-utils
+++ b/lfs/cifs-utils
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = cifs-utils
-PAK_VER    = 5
+PAK_VER    = 6
 
 DEPS       =
 
-- 
2.45.2

[PATCH 05/15] dnsdist: ship due to libcap sobump

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 1156 bytes --]

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 lfs/dnsdist | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/dnsdist b/lfs/dnsdist
index 5a8c0ac70..cc4138a91 100644
--- a/lfs/dnsdist
+++ b/lfs/dnsdist
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = dnsdist
-PAK_VER    = 23
+PAK_VER    = 24
 
 SUP_ARCH   = x86_64 aarch64
 
-- 
2.45.2

[PATCH 06/15] freeradius: ship due to libcap sobump

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 473 bytes --]

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 lfs/freeradius | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lfs/freeradius b/lfs/freeradius
index df59bd63b..3b715b32c 100644
--- a/lfs/freeradius
+++ b/lfs/freeradius
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = freeradius
-PAK_VER    = 20
+PAK_VER    = 21
 
 DEPS       = libtalloc samba
 
-- 
2.45.2

[PATCH 07/15] frr: ship due to libcap sobump

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 414 bytes --]

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 lfs/frr | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lfs/frr b/lfs/frr
index ea5a6b9e9..943e06b2e 100644
--- a/lfs/frr
+++ b/lfs/frr
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = frr
-PAK_VER    = 9
+PAK_VER    = 10
 
 DEPS       =
 
-- 
2.45.2

[PATCH 08/15] htop: ship due to libcap sobump

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 421 bytes --]

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 lfs/htop | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lfs/htop b/lfs/htop
index d2df29082..57f81a898 100644
--- a/lfs/htop
+++ b/lfs/htop
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = htop
-PAK_VER    = 21
+PAK_VER    = 22
 
 DEPS       =
 
-- 
2.45.2

[PATCH 09/15] nfs: ship due to libcap sobump

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 1125 bytes --]

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 lfs/nfs | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/nfs b/lfs/nfs
index 713dbeacd..9e6130871 100644
--- a/lfs/nfs
+++ b/lfs/nfs
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = nfs
-PAK_VER    = 22
+PAK_VER    = 23
 
 DEPS       = rpcbind
 
-- 
2.45.2

[PATCH 10/15] rng-tools: ship due to libcap sobump

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 1151 bytes --]

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 lfs/rng-tools | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/rng-tools b/lfs/rng-tools
index fb0d729e3..07b658d05 100644
--- a/lfs/rng-tools
+++ b/lfs/rng-tools
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -33,7 +33,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = rng-tools
-PAK_VER    = 4
+PAK_VER    = 5
 
 DEPS       =
 
-- 
2.45.2

[PATCH 11/15] samba: ship due to libcap sobump

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 471 bytes --]

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 lfs/samba | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lfs/samba b/lfs/samba
index 05b9725c8..078c27d78 100644
--- a/lfs/samba
+++ b/lfs/samba
@@ -33,7 +33,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = samba
-PAK_VER    = 103
+PAK_VER    = 104
 
 DEPS       = avahi cups perl-Parse-Yapp perl-JSON wsdd
 
-- 
2.45.2

[PATCH 12/15] tor: ship due to libcap sobump

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 426 bytes --]

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 lfs/tor | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lfs/tor b/lfs/tor
index 7659c5212..ebfc9fc30 100644
--- a/lfs/tor
+++ b/lfs/tor
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = tor
-PAK_VER    = 86
+PAK_VER    = 87
 
 DEPS       = libseccomp
 
-- 
2.45.2

[PATCH 13/15] tshark: ship due to libcap sobump

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 426 bytes --]

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 lfs/tshark | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lfs/tshark b/lfs/tshark
index 7156476d1..2d02eb748 100644
--- a/lfs/tshark
+++ b/lfs/tshark
@@ -35,7 +35,7 @@ DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = tshark
 DEPS       = c-ares
-PAK_VER    = 17
+PAK_VER    = 18
 
 SERVICES   =
 
-- 
2.45.2

[PATCH 14/15] vdr: ship due to libcap sobump

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 429 bytes --]

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 lfs/vdr | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lfs/vdr b/lfs/vdr
index 41dd4e92d..c0333ee5f 100644
--- a/lfs/vdr
+++ b/lfs/vdr
@@ -39,7 +39,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = vdr
-PAK_VER    = 17
+PAK_VER    = 18
 
 DEPS       = vdr_streamdev
 
-- 
2.45.2

[PATCH 15/15] wavemon: ship due to libcap sobump

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 437 bytes --]

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 lfs/wavemon | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lfs/wavemon b/lfs/wavemon
index 1de2f9fab..c7a606752 100644
--- a/lfs/wavemon
+++ b/lfs/wavemon
@@ -35,7 +35,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = wavemon
-PAK_VER    = 3
+PAK_VER    = 4
 
 DEPS       =
 
-- 
2.45.2

Re: [PATCH 01/15] libcap: Update to version 2.70

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 3782 bytes --]

Hello,

I don’t think we have an SO bump here…

Binaries should be linked against libcap.2 and that has not changed.

Are they not working with the new version any more?

Best,
-Michael

> On 9 Aug 2024, at 12:23, Adolf Belka <adolf.belka(a)ipfire.org> wrote:
> 
> - Update from version 2.69 to 2.70
> - Update of rootfile
> - sobump means following core packages need to be shipped
>   arping
>   cdrkit
>   iproute2
>   iputils
>   ntp
>   squid
>   udev
>  and the following addons will be shipped with the pak_ver increments in the other
>   patches that are part ofg this set
>   avahi
>   bacula
>   cifs-utils
>   dnsdist
>   freeradius
>   frr
>   htop
>   nfs
>   rng-tools
>   samba
>   tor
>   tshark
>   vdr
>   wavemon
> - Changelog
>   2.70
> setcap changes to make it harder to set invalid file capabilities (Bug 217592\
> reported by parke.nexus)
> Lots of documentation fixes (contributions from Jakub Wilk and
> Carlos Rodriguez-Fernandez)
> Fix c89 compilation syntax for the C code in the libraries.
> libpam has deprecated providing the _pam_overwrite() function, so use memset()
> instead
> 
> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
> ---
> config/rootfiles/common/libcap | 8 +++++---
> lfs/libcap                     | 6 +++---
> 2 files changed, 8 insertions(+), 6 deletions(-)
> 
> diff --git a/config/rootfiles/common/libcap b/config/rootfiles/common/libcap
> index f331e2a43..ea90c7564 100644
> --- a/config/rootfiles/common/libcap
> +++ b/config/rootfiles/common/libcap
> @@ -4,12 +4,12 @@ sbin/getpcaps
> sbin/setcap
> #usr/include/sys/capability.h
> #usr/include/sys/psx_syscall.h
> -usr/lib/libcap.so
> +#usr/lib/libcap.so
> usr/lib/libcap.so.2
> -usr/lib/libcap.so.2.69
> +usr/lib/libcap.so.2.70
> #usr/lib/libpsx.so
> #usr/lib/libpsx.so.2
> -usr/lib/libpsx.so.2.69
> +usr/lib/libpsx.so.2.70
> #usr/lib/pkgconfig/libcap.pc
> #usr/lib/pkgconfig/libpsx.pc
> #usr/lib/security
> @@ -88,7 +88,9 @@ usr/lib/security/pam_cap.so
> #usr/share/man/man3/psx_syscall.3
> #usr/share/man/man3/psx_syscall3.3
> #usr/share/man/man3/psx_syscall6.3
> +#usr/share/man/man5/capability.conf.5
> #usr/share/man/man8/captree.8
> #usr/share/man/man8/getcap.8
> #usr/share/man/man8/getpcaps.8
> +#usr/share/man/man8/pam_cap.8
> #usr/share/man/man8/setcap.8
> diff --git a/lfs/libcap b/lfs/libcap
> index 951ed80dc..51e32f9c6 100644
> --- a/lfs/libcap
> +++ b/lfs/libcap
> @@ -1,7 +1,7 @@
> ###############################################################################
> #                                                                             #
> # IPFire.org - A linux based firewall                                         #
> -# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
> +# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
> #                                                                             #
> # This program is free software: you can redistribute it and/or modify        #
> # it under the terms of the GNU General Public License as published by        #
> @@ -24,7 +24,7 @@
> 
> include Config
> 
> -VER        = 2.69
> +VER        = 2.70
> 
> THISAPP    = libcap-$(VER)
> DL_FILE    = $(THISAPP).tar.xz
> @@ -40,7 +40,7 @@ objects = $(DL_FILE)
> 
> $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
> 
> -$(DL_FILE)_BLAKE2 = 94d1fef7666a1c383a8b96f1f6092bd242164631532868b628d2f5de71b42a371d041a978ef7fbadfee3eeb433165444995d1078cd790275bc0433a7875a697e
> +$(DL_FILE)_BLAKE2 = 77b72acee53032117ea481e3380d1b497f9264b6193b9523542508c7c3e46070248ca4ed910d35809ce6e52caa60cbb31edb125c47221627eeda35c61bd0914b
> 
> install : $(TARGET)
> 
> -- 
> 2.45.2
> 

Re: [PATCH 01/15] libcap: Update to version 2.70

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 4325 bytes --]

Hi Michael,

On 09/08/2024 16:23, Michael Tremer wrote:
> Hello,
> 
> I don’t think we have an SO bump here…
When I look at it now, it doesn't look like an sobump but clearly for some reason I thought it was.

Oh well, then all those additional patches for the addons can be thrown away.

Looking below in the rootfile I do see that libpsx.so.2 is commented out. Should that be uncommented?

Apologies for the mistake.

Regards,
Adolf.

> 
> Binaries should be linked against libcap.2 and that has not changed.
> 
> Are they not working with the new version any more?
> 
> Best,
> -Michael
> 
>> On 9 Aug 2024, at 12:23, Adolf Belka <adolf.belka(a)ipfire.org> wrote:
>>
>> - Update from version 2.69 to 2.70
>> - Update of rootfile
>> - sobump means following core packages need to be shipped
>>    arping
>>    cdrkit
>>    iproute2
>>    iputils
>>    ntp
>>    squid
>>    udev
>>   and the following addons will be shipped with the pak_ver increments in the other
>>    patches that are part ofg this set
>>    avahi
>>    bacula
>>    cifs-utils
>>    dnsdist
>>    freeradius
>>    frr
>>    htop
>>    nfs
>>    rng-tools
>>    samba
>>    tor
>>    tshark
>>    vdr
>>    wavemon
>> - Changelog
>>    2.70
>> setcap changes to make it harder to set invalid file capabilities (Bug 217592\
>> reported by parke.nexus)
>> Lots of documentation fixes (contributions from Jakub Wilk and
>> Carlos Rodriguez-Fernandez)
>> Fix c89 compilation syntax for the C code in the libraries.
>> libpam has deprecated providing the _pam_overwrite() function, so use memset()
>> instead
>>
>> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
>> ---
>> config/rootfiles/common/libcap | 8 +++++---
>> lfs/libcap                     | 6 +++---
>> 2 files changed, 8 insertions(+), 6 deletions(-)
>>
>> diff --git a/config/rootfiles/common/libcap b/config/rootfiles/common/libcap
>> index f331e2a43..ea90c7564 100644
>> --- a/config/rootfiles/common/libcap
>> +++ b/config/rootfiles/common/libcap
>> @@ -4,12 +4,12 @@ sbin/getpcaps
>> sbin/setcap
>> #usr/include/sys/capability.h
>> #usr/include/sys/psx_syscall.h
>> -usr/lib/libcap.so
>> +#usr/lib/libcap.so
>> usr/lib/libcap.so.2
>> -usr/lib/libcap.so.2.69
>> +usr/lib/libcap.so.2.70
>> #usr/lib/libpsx.so
>> #usr/lib/libpsx.so.2
>> -usr/lib/libpsx.so.2.69
>> +usr/lib/libpsx.so.2.70
>> #usr/lib/pkgconfig/libcap.pc
>> #usr/lib/pkgconfig/libpsx.pc
>> #usr/lib/security
>> @@ -88,7 +88,9 @@ usr/lib/security/pam_cap.so
>> #usr/share/man/man3/psx_syscall.3
>> #usr/share/man/man3/psx_syscall3.3
>> #usr/share/man/man3/psx_syscall6.3
>> +#usr/share/man/man5/capability.conf.5
>> #usr/share/man/man8/captree.8
>> #usr/share/man/man8/getcap.8
>> #usr/share/man/man8/getpcaps.8
>> +#usr/share/man/man8/pam_cap.8
>> #usr/share/man/man8/setcap.8
>> diff --git a/lfs/libcap b/lfs/libcap
>> index 951ed80dc..51e32f9c6 100644
>> --- a/lfs/libcap
>> +++ b/lfs/libcap
>> @@ -1,7 +1,7 @@
>> ###############################################################################
>> #                                                                             #
>> # IPFire.org - A linux based firewall                                         #
>> -# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
>> +# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
>> #                                                                             #
>> # This program is free software: you can redistribute it and/or modify        #
>> # it under the terms of the GNU General Public License as published by        #
>> @@ -24,7 +24,7 @@
>>
>> include Config
>>
>> -VER        = 2.69
>> +VER        = 2.70
>>
>> THISAPP    = libcap-$(VER)
>> DL_FILE    = $(THISAPP).tar.xz
>> @@ -40,7 +40,7 @@ objects = $(DL_FILE)
>>
>> $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
>>
>> -$(DL_FILE)_BLAKE2 = 94d1fef7666a1c383a8b96f1f6092bd242164631532868b628d2f5de71b42a371d041a978ef7fbadfee3eeb433165444995d1078cd790275bc0433a7875a697e
>> +$(DL_FILE)_BLAKE2 = 77b72acee53032117ea481e3380d1b497f9264b6193b9523542508c7c3e46070248ca4ed910d35809ce6e52caa60cbb31edb125c47221627eeda35c61bd0914b
>>
>> install : $(TARGET)
>>
>> -- 
>> 2.45.2
>>
> 

Re: [PATCH 01/15] libcap: Update to version 2.70

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 4780 bytes --]

I think we should ship pretty much everything these days.

Storage is cheap and we would risk breaking anything and then having to spend time to sort it out for saving 2 KiB worth of space on the ISO image and 10 KiB on disk.

So, just ship it all :)

-Michael

> On 9 Aug 2024, at 16:14, Adolf Belka <adolf.belka(a)ipfire.org> wrote:
> 
> Hi Michael,
> 
> On 09/08/2024 16:23, Michael Tremer wrote:
>> Hello,
>> I don’t think we have an SO bump here…
> When I look at it now, it doesn't look like an sobump but clearly for some reason I thought it was.
> 
> Oh well, then all those additional patches for the addons can be thrown away.
> 
> Looking below in the rootfile I do see that libpsx.so.2 is commented out. Should that be uncommented?
> 
> Apologies for the mistake.
> 
> Regards,
> Adolf.
> 
>> Binaries should be linked against libcap.2 and that has not changed.
>> Are they not working with the new version any more?
>> Best,
>> -Michael
>>> On 9 Aug 2024, at 12:23, Adolf Belka <adolf.belka(a)ipfire.org> wrote:
>>> 
>>> - Update from version 2.69 to 2.70
>>> - Update of rootfile
>>> - sobump means following core packages need to be shipped
>>>   arping
>>>   cdrkit
>>>   iproute2
>>>   iputils
>>>   ntp
>>>   squid
>>>   udev
>>>  and the following addons will be shipped with the pak_ver increments in the other
>>>   patches that are part ofg this set
>>>   avahi
>>>   bacula
>>>   cifs-utils
>>>   dnsdist
>>>   freeradius
>>>   frr
>>>   htop
>>>   nfs
>>>   rng-tools
>>>   samba
>>>   tor
>>>   tshark
>>>   vdr
>>>   wavemon
>>> - Changelog
>>>   2.70
>>> setcap changes to make it harder to set invalid file capabilities (Bug 217592\
>>> reported by parke.nexus)
>>> Lots of documentation fixes (contributions from Jakub Wilk and
>>> Carlos Rodriguez-Fernandez)
>>> Fix c89 compilation syntax for the C code in the libraries.
>>> libpam has deprecated providing the _pam_overwrite() function, so use memset()
>>> instead
>>> 
>>> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
>>> ---
>>> config/rootfiles/common/libcap | 8 +++++---
>>> lfs/libcap                     | 6 +++---
>>> 2 files changed, 8 insertions(+), 6 deletions(-)
>>> 
>>> diff --git a/config/rootfiles/common/libcap b/config/rootfiles/common/libcap
>>> index f331e2a43..ea90c7564 100644
>>> --- a/config/rootfiles/common/libcap
>>> +++ b/config/rootfiles/common/libcap
>>> @@ -4,12 +4,12 @@ sbin/getpcaps
>>> sbin/setcap
>>> #usr/include/sys/capability.h
>>> #usr/include/sys/psx_syscall.h
>>> -usr/lib/libcap.so
>>> +#usr/lib/libcap.so
>>> usr/lib/libcap.so.2
>>> -usr/lib/libcap.so.2.69
>>> +usr/lib/libcap.so.2.70
>>> #usr/lib/libpsx.so
>>> #usr/lib/libpsx.so.2
>>> -usr/lib/libpsx.so.2.69
>>> +usr/lib/libpsx.so.2.70
>>> #usr/lib/pkgconfig/libcap.pc
>>> #usr/lib/pkgconfig/libpsx.pc
>>> #usr/lib/security
>>> @@ -88,7 +88,9 @@ usr/lib/security/pam_cap.so
>>> #usr/share/man/man3/psx_syscall.3
>>> #usr/share/man/man3/psx_syscall3.3
>>> #usr/share/man/man3/psx_syscall6.3
>>> +#usr/share/man/man5/capability.conf.5
>>> #usr/share/man/man8/captree.8
>>> #usr/share/man/man8/getcap.8
>>> #usr/share/man/man8/getpcaps.8
>>> +#usr/share/man/man8/pam_cap.8
>>> #usr/share/man/man8/setcap.8
>>> diff --git a/lfs/libcap b/lfs/libcap
>>> index 951ed80dc..51e32f9c6 100644
>>> --- a/lfs/libcap
>>> +++ b/lfs/libcap
>>> @@ -1,7 +1,7 @@
>>> ###############################################################################
>>> #                                                                             #
>>> # IPFire.org - A linux based firewall                                         #
>>> -# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
>>> +# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
>>> #                                                                             #
>>> # This program is free software: you can redistribute it and/or modify        #
>>> # it under the terms of the GNU General Public License as published by        #
>>> @@ -24,7 +24,7 @@
>>> 
>>> include Config
>>> 
>>> -VER        = 2.69
>>> +VER        = 2.70
>>> 
>>> THISAPP    = libcap-$(VER)
>>> DL_FILE    = $(THISAPP).tar.xz
>>> @@ -40,7 +40,7 @@ objects = $(DL_FILE)
>>> 
>>> $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
>>> 
>>> -$(DL_FILE)_BLAKE2 = 94d1fef7666a1c383a8b96f1f6092bd242164631532868b628d2f5de71b42a371d041a978ef7fbadfee3eeb433165444995d1078cd790275bc0433a7875a697e
>>> +$(DL_FILE)_BLAKE2 = 77b72acee53032117ea481e3380d1b497f9264b6193b9523542508c7c3e46070248ca4ed910d35809ce6e52caa60cbb31edb125c47221627eeda35c61bd0914b
>>> 
>>> install : $(TARGET)
>>> 
>>> -- 
>>> 2.45.2
>>> 

Re: [PATCH 01/15] libcap: Update to version 2.70

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 5179 bytes --]

Hi Michael,

On 13/08/2024 11:58, Michael Tremer wrote:
> I think we should ship pretty much everything these days.
> 
> Storage is cheap and we would risk breaking anything and then having to spend time to sort it out for saving 2 KiB worth of space on the ISO image and 10 KiB on disk.
> 
> So, just ship it all :)
That is a good point. We experienced that with the openssl update where 
we found all the packages that used openssl that I had missed.

Regards,
Adolf.
> 
> -Michael
> 
>> On 9 Aug 2024, at 16:14, Adolf Belka <adolf.belka(a)ipfire.org> wrote:
>>
>> Hi Michael,
>>
>> On 09/08/2024 16:23, Michael Tremer wrote:
>>> Hello,
>>> I don’t think we have an SO bump here…
>> When I look at it now, it doesn't look like an sobump but clearly for some reason I thought it was.
>>
>> Oh well, then all those additional patches for the addons can be thrown away.
>>
>> Looking below in the rootfile I do see that libpsx.so.2 is commented out. Should that be uncommented?
>>
>> Apologies for the mistake.
>>
>> Regards,
>> Adolf.
>>
>>> Binaries should be linked against libcap.2 and that has not changed.
>>> Are they not working with the new version any more?
>>> Best,
>>> -Michael
>>>> On 9 Aug 2024, at 12:23, Adolf Belka <adolf.belka(a)ipfire.org> wrote:
>>>>
>>>> - Update from version 2.69 to 2.70
>>>> - Update of rootfile
>>>> - sobump means following core packages need to be shipped
>>>>    arping
>>>>    cdrkit
>>>>    iproute2
>>>>    iputils
>>>>    ntp
>>>>    squid
>>>>    udev
>>>>   and the following addons will be shipped with the pak_ver increments in the other
>>>>    patches that are part ofg this set
>>>>    avahi
>>>>    bacula
>>>>    cifs-utils
>>>>    dnsdist
>>>>    freeradius
>>>>    frr
>>>>    htop
>>>>    nfs
>>>>    rng-tools
>>>>    samba
>>>>    tor
>>>>    tshark
>>>>    vdr
>>>>    wavemon
>>>> - Changelog
>>>>    2.70
>>>> setcap changes to make it harder to set invalid file capabilities (Bug 217592\
>>>> reported by parke.nexus)
>>>> Lots of documentation fixes (contributions from Jakub Wilk and
>>>> Carlos Rodriguez-Fernandez)
>>>> Fix c89 compilation syntax for the C code in the libraries.
>>>> libpam has deprecated providing the _pam_overwrite() function, so use memset()
>>>> instead
>>>>
>>>> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
>>>> ---
>>>> config/rootfiles/common/libcap | 8 +++++---
>>>> lfs/libcap                     | 6 +++---
>>>> 2 files changed, 8 insertions(+), 6 deletions(-)
>>>>
>>>> diff --git a/config/rootfiles/common/libcap b/config/rootfiles/common/libcap
>>>> index f331e2a43..ea90c7564 100644
>>>> --- a/config/rootfiles/common/libcap
>>>> +++ b/config/rootfiles/common/libcap
>>>> @@ -4,12 +4,12 @@ sbin/getpcaps
>>>> sbin/setcap
>>>> #usr/include/sys/capability.h
>>>> #usr/include/sys/psx_syscall.h
>>>> -usr/lib/libcap.so
>>>> +#usr/lib/libcap.so
>>>> usr/lib/libcap.so.2
>>>> -usr/lib/libcap.so.2.69
>>>> +usr/lib/libcap.so.2.70
>>>> #usr/lib/libpsx.so
>>>> #usr/lib/libpsx.so.2
>>>> -usr/lib/libpsx.so.2.69
>>>> +usr/lib/libpsx.so.2.70
>>>> #usr/lib/pkgconfig/libcap.pc
>>>> #usr/lib/pkgconfig/libpsx.pc
>>>> #usr/lib/security
>>>> @@ -88,7 +88,9 @@ usr/lib/security/pam_cap.so
>>>> #usr/share/man/man3/psx_syscall.3
>>>> #usr/share/man/man3/psx_syscall3.3
>>>> #usr/share/man/man3/psx_syscall6.3
>>>> +#usr/share/man/man5/capability.conf.5
>>>> #usr/share/man/man8/captree.8
>>>> #usr/share/man/man8/getcap.8
>>>> #usr/share/man/man8/getpcaps.8
>>>> +#usr/share/man/man8/pam_cap.8
>>>> #usr/share/man/man8/setcap.8
>>>> diff --git a/lfs/libcap b/lfs/libcap
>>>> index 951ed80dc..51e32f9c6 100644
>>>> --- a/lfs/libcap
>>>> +++ b/lfs/libcap
>>>> @@ -1,7 +1,7 @@
>>>> ###############################################################################
>>>> #                                                                             #
>>>> # IPFire.org - A linux based firewall                                         #
>>>> -# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
>>>> +# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
>>>> #                                                                             #
>>>> # This program is free software: you can redistribute it and/or modify        #
>>>> # it under the terms of the GNU General Public License as published by        #
>>>> @@ -24,7 +24,7 @@
>>>>
>>>> include Config
>>>>
>>>> -VER        = 2.69
>>>> +VER        = 2.70
>>>>
>>>> THISAPP    = libcap-$(VER)
>>>> DL_FILE    = $(THISAPP).tar.xz
>>>> @@ -40,7 +40,7 @@ objects = $(DL_FILE)
>>>>
>>>> $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
>>>>
>>>> -$(DL_FILE)_BLAKE2 = 94d1fef7666a1c383a8b96f1f6092bd242164631532868b628d2f5de71b42a371d041a978ef7fbadfee3eeb433165444995d1078cd790275bc0433a7875a697e
>>>> +$(DL_FILE)_BLAKE2 = 77b72acee53032117ea481e3380d1b497f9264b6193b9523542508c7c3e46070248ca4ed910d35809ce6e52caa60cbb31edb125c47221627eeda35c61bd0914b
>>>>
>>>> install : $(TARGET)
>>>>
>>>> -- 
>>>> 2.45.2
>>>>
> 

-- 
Sent from my laptop