libdrop_ambient0-0.8.3-2.2 RPM for s390x

From OpenSuSE Ports Tumbleweed for s390x

This library can be used via LD_PRELOAD to force an application started with ambient capabilities to drop them.
It leaves other capabilities intact. This can also be linked against and automatically does the right thing.
You do not need to make any calls into the library because all the work is done in the constructor which runs before main() is called.

Provides

• libdrop_ambient0
• libdrop_ambient.so.0()(64bit)
• libdrop_ambient0(s390-64)

Requires

• /sbin/ldconfig
• /sbin/ldconfig
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.2)(64bit)
• libcap-ng0 = 0.8.3
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1

License

LGPL-2.1-or-later

Changelog

* Thu May 04 2023 Frederic Crozat <fcrozat@suse.com>
  - Add _multibuild to define additional spec files as additional
    flavors.
    Eliminates the need for source package links in OBS.
* Mon May 09 2022 Paolo Stivanin <info@paolostivanin.com>
  - Update to 0.8.3:
    * Add vararg support to python bindings for capng_updatev
    * Add support for ambient capabilities
    * Add support for V3 filesystem capabilities
    * If procfs is not available, leave last_cap as CAP_LAST_CAP
    * If bounding and ambient not found in status, try prctl method
    * In capng_apply, move ambient caps to the end of the transaction
    * In capng_apply, return errors more aggressively.
    * In capng_apply, if the action includes the bounding set,resync with the kernel
    * Fix signed/unsigned warning in cap-ng.c
    * In capng_apply, return a unique error code to diagnose any failure
    * In capng_have_capability, return 0 for failure
    * Add the libdrop_ambient admin tool
    * In capng_apply, if we blew up in bounding set, allow setting capabilities
    * If PR_CAP_AMBIENT is not available, do not build libdrop_ambient
    * Improve last_cap check
    * Fix parameters to capng_updatev python bindings to be signed
    * Detect capability options at runtime to make containerization easier (ntkme)
    * Initialize the library when linked statically
    * Add gcc function attributes for deallocation
* Thu Dec 09 2021 Ferdinand Thiessen <rpm@fthiessen.de>
  - Update to 0.7.11
    * Really clear bounding set if asked in capng_change_id
    * Add CAP_PERFMON, CAP_BPF, & CAP_CHECKPOINT_RESTORE
    * Avoid malloc/free in capng_apply (Natanael Copa)
    * If procfs is not available, get bounding set via prctl
  - Removed unneeded rules from rpmlintrc
* Tue May 12 2020 Paolo Stivanin <info@paolostivanin.com>
  - Update to 0.7.10:
    * Update capng_change_id man page
    * Add capng_have_permitted_capabilities function
    * Update filecap to output which set the capabilities are in
    * Fix filecap to not output an error when a file has no capabilities
    * Add udplite support to netcap
    * Fix usage of pthread_atfork (Joe Orton)
    * Mark processes in child user namespaces with * (Danila Kiver)
* Thu Aug 08 2019 Dominique Leuenberger <dimstar@opensuse.org>
  - Own %{_datadir}/aclocal: when we might switch to pkgconf instead
    of pkg-config, nothing in the build root is 'accidentally' owning
    this directory for us.
* Tue Feb 20 2018 tchvatal@suse.com
  - Move %doc to %license for licenses
* Sun Feb 18 2018 jengelh@inai.de
  - Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
  - Rename %soname to %sover to better reflect its use.
* Sun Feb 18 2018 avindra@opensuse.org
  - Update to version 0.7.9:
    * Detect and output a couple errors in filecap
    * Use pthread_atfork to optionally reset the pid and related info
      on fork
  - cleanup with spec-cleaner
  - use https urls
* Wed May 17 2017 alexander_naumov@opensuse.org
  - Update to version 0.7.8:
    * Improve Python3 support
    * Fix the thread separation test
    * Correct typo in cap_pacct text
    * Update man page for captest
    * Fix sscanf string lengths in netcap
    * Correct linking of python3 module
* Wed Dec 02 2015 p.drouand@gmail.com
  - Update to version 0.7.7
    * Make sure all types used in _lnode are defined in proc-llist.h
    * Fix python binding test for old kernels
    * Fix leaked FD in library init
  - Changes from version 0.7.6
    * Fix python3 support
  - Changes from version 0.7.5
    * Make python3 supported
    * In python bindings test, clamp CAP_LAST_CAP with /proc/.../cap_last_cap
    * Update table for 3.16 kernel

Files

/usr/lib64/libdrop_ambient.so.0
/usr/lib64/libdrop_ambient.so.0.0.0

Generated by rpm2html 1.8.1

Fabrice Bellet, Sat Mar 9 12:50:11 2024