Capabilities are a measure to limit the omnipotence of the superuser.
Currently a program started by root or setuid root has the power to do
anything. Capabilities (Linux-Privs) provide a more fine-grained access
control. Without kernel patches, you can use this library to drop
capabilities within setuid binaries. If you use patches, this can be
done automatically by the kernel.
Provides
Requires
License
BSD-3-Clause OR GPL-2.0-only
Changelog
* Thu Oct 16 2025 Callum Farmer <gmbr3@opensuse.org>
- Move utils to bindir and then provide symlinks under sbindir
as needed by Steam (bsc#1252129)
* Sun Mar 23 2025 Andreas Stieger <andreas.stieger@gmx.de>
- update to 1.2.75:
* go related fixes
- includes changes from 1.2.74:
* Group syntax parsing bugfix for pam_cap
* Doc typo fix for cap_get_proc.3
* Fix transitive include in capsh.c
* go related changes
* Mon Dec 09 2024 Andreas Schwab <schwab@suse.de>
- Disable psx_test and b219174 tests in qemu emulation
* Mon Dec 02 2024 Petr Vorel <pvorel@suse.cz>
- update to 2.73:
* https://sites.google.com/site/fullycapable/release-notes-for-libcap?authuser=0#h.7yd7ab9ppagk
* Sat May 25 2024 Andreas Stieger <andreas.stieger@gmx.de>
- update to 2.70:
* setcap changes to make it harder to set invalid file capabilities
* Lots of documentation fixes
* Fix c89 compilation syntax for the C code in the libraries
* libpam has deprecated providing the _pam_overwrite() function,
so use memset() instead
* Tue May 16 2023 Marcus Meissner <meissner@suse.com>
- updated to 2.69
- An audit was performed on libcap and friends by https://x41-dsec.de/ (blog) . The audit (final report, 2023-05-10) was sponsored by the the Open Source Technology Improvement Fund, https://ostif.org/ (blog). Five issues were found. Four of them are addressed in this release. Each issue was labeled in the audit results as follows:
- LCAP-CR-23-01 (SEVERITY) LOW (CVE-2023-2602) - found by David Gstir (bsc#1211418)
- LCAP-CR-23-02 (SEVERITY) MEDIUM (CVE-2023-2603) - found by Richard Weinberger (bsc#1211419)
- LCAP-CR-23-100 (SEVERITY) NONE
- LCAP-CR-23-101 (SEVERITY) NONE
- LCAP-CR-23-102 (SEVERITY) NONE
- Man page style improvement from Emanuele Torre
* Thu Mar 30 2023 Dirk Müller <dmueller@suse.com>
- update to 2.68:
* Force libcap internal functions to be hidden outside the library
* Expanded the list of man page (links) to all of the supported API
functions.
* fixed some formatting issues with the libpsx(3) manpage.
* Add support for a markdown preamble and postscript when generating
.md versions of the man pages (Bug 217007)
* psx package clean up
* fix some copy-paste errors with TestShared()
* added a more complete psx testing into this test as well
* cap package clean up
* drop an unnecessary use of ", _" in the sources
* cleaned up cap.NamedCount documentation
* Converted goapps/web/README to .md format and fixed the
instructions to indicate go mod tidy is needed.
* cap_compare test binary now cleans up after itself (Bug 217018)
* Figured out how to cross compile Go programs for arm (i.e. RPi) that
use C code, don't use cgo but do use the psx package
* Eliminate use of vendor directory
* Fri Mar 24 2023 Martin Liška <mliska@suse.cz>
- Enable LTO and add missing -ffat-lto-objects for the provided
static libs.
* Fri Mar 24 2023 Takashi Iwai <tiwai@suse.com>
- Revert LTO again; it still breaks builds
* Thu Mar 23 2023 Martin Liška <mliska@suse.cz>
- Enable LTO as it works fine.
* Sat Feb 04 2023 Dirk Müller <dmueller@suse.com>
- update to 2.67:
* Replace use of fgrep with grep -F (POSIX grep flags preferred by
GNU grep) - patch from David Seifert.
* Added SPDX identifiers to License file(s). Hopefully this will
help the various robots out there correctly identify the
longstanding licenses for libcap and friends. (Bug: 216609
rep