Library for Capabilities (linux-privs) Support

Edit Package libcap

Capabilities are a measure to limit the omnipotence of the superuser.
Currently a program started by root or setuid root has the power to do
anything. Capabilities (Linux-Privs) provide a more fine-grained access
control. Without kernel patches, you can use this library to drop
capabilities within setuid binaries. If you use patches, this can be
done automatically by the kernel.

Refresh
Refresh
Source Files
Filename Size Changed
baselibs.conf 0000000016 16 Bytes
libcap-2.51.tar.xz 0000145440 142 KB
libcap.changes 0000017644 17.2 KB
libcap.spec 0000004477 4.37 KB
Revision 47 (latest revision is 60)
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 906773 from Dirk Mueller's avatar Dirk Mueller (dirkmueller) (revision 47)
- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module
Comments 1

Ilgaz Öcal's avatar

This library is problematic on current openSUSE TW, it doesn't install and when I try to build from rpm source:

Checking for unpackaged file(s): /usr/lib/rpm/check-files /home/ilgaz/rpmbuild/BUILDROOT/libcap-2.64-84.121.x86_64 error: Installed (but unpackaged) file(s) found: /usr/lib64/security/pam_cap.so

RPM build errors: Installed (but unpackaged) file(s) found: /usr/lib64/security/pam_cap.so

openSUSE Build Service is sponsored by