Library for Capabilities (linux-privs) Support
Capabilities are a measure to limit the omnipotence of the superuser.
Currently a program started by root or setuid root has the power to do
anything. Capabilities (Linux-Privs) provide a more fine-grained access
control. Without kernel patches, you can use this library to drop
capabilities within setuid binaries. If you use patches, this can be
done automatically by the kernel.
- Developed at Base:System
- Sources inherited from project openSUSE:Factory
-
5
derived packages
- Download package
-
Checkout Package
osc -A https://api.opensuse.org checkout openSUSE:Backports:SLE-15-SP4:FactoryCandidates/libcap && cd $_ - Create Badge
Refresh
Refresh
Source Files
| Filename | Size | Changed |
|---|---|---|
| baselibs.conf | 0000000016 16 Bytes | |
| libcap-2.65.tar.sign | 0000000833 833 Bytes | |
| libcap-2.65.tar.xz | 0000179852 176 KB | |
| libcap.changes | 0000022186 21.7 KB | |
| libcap.keyring | 0000015396 15 KB | |
| libcap.spec | 0000004717 4.61 KB |
Revision 54 (latest revision is 59)
Fabian Vogt (favogt_factory)
accepted
request 990728
from
Dirk Mueller (dirkmueller)
(revision 54)
- update to 2.65:
* Fix syntax error in DEBUG build of protected code in setcap.c.
* Prevent bash from reading the wrong startup files when the capsh --user=xxx
argument is used to invoke a shell as the user xxx. This is done by capsh now
changing the USER and HOME environment variables when --user is specified.
The argument --noenv can be used to suppress this behavior to what used to be
the problematic default. (Bug: 215926)
* Improved documentation
Comments 1
This library is problematic on current openSUSE TW, it doesn't install and when I try to build from rpm source:
Checking for unpackaged file(s): /usr/lib/rpm/check-files /home/ilgaz/rpmbuild/BUILDROOT/libcap-2.64-84.121.x86_64 error: Installed (but unpackaged) file(s) found: /usr/lib64/security/pam_cap.so
RPM build errors: Installed (but unpackaged) file(s) found: /usr/lib64/security/pam_cap.so