Library for Capabilities (linux-privs) Support
Capabilities are a measure to limit the omnipotence of the superuser.
Currently a program started by root or setuid root has the power to do
anything. Capabilities (Linux-Privs) provide a more fine-grained access
control. Without kernel patches, you can use this library to drop
capabilities within setuid binaries. If you use patches, this can be
done automatically by the kernel.
- Developed at Base:System
-
6
derived packages
- Download package
-
Checkout Package
osc -A https://api.opensuse.org checkout openSUSE:Factory/libcap && cd $_
- Create Badge
Refresh
Refresh
Source Files
Filename | Size | Changed |
---|---|---|
baselibs.conf | 0000000016 16 Bytes | |
libcap-2.51.tar.xz | 0000145440 142 KB | |
libcap.changes | 0000017644 17.2 KB | |
libcap.spec | 0000004477 4.37 KB |
Revision 47 (latest revision is 60)
- update to 2.51: * Fix capsh installation * Add an autoauth module flag to pam_cap.so * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one capability flag to another. * --explain=cap_foo: describe what cap_foo does * --suggest=phrase: search all the cap descriptions and describe those that match the phrase * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945) * extend libcap to include cap_prctl() and cap_prctlw() functions to regain feature parity with Go "cap" package. These are only needed when linking against -lpsx for keepcaps POSIX semantics. * this likely requires substantial application changes to make Ambient capability support usable in general, but doing our part for the admin. * Add a test case for recent kernel fix * Go pragma fix for convenience functions in "cap" module
Comments 1
This library is problematic on current openSUSE TW, it doesn't install and when I try to build from rpm source:
Checking for unpackaged file(s): /usr/lib/rpm/check-files /home/ilgaz/rpmbuild/BUILDROOT/libcap-2.64-84.121.x86_64 error: Installed (but unpackaged) file(s) found: /usr/lib64/security/pam_cap.so
RPM build errors: Installed (but unpackaged) file(s) found: /usr/lib64/security/pam_cap.so