libcap: Update to version 2.72
Commit Message
- Update from version 2.70 to 2.72
- Update of rootfile
- Changelog
2.72
ERRATA:
Failed to support more modern Linux architectures including arm64. Fix provided
by Xi Ruoyao.
This specific release is devoted to a wholesale rewrite of libpsx to operate on
native Linux threads (aka LWP = Light Weight Processes).
Given the potential for misbehavior, we're isolating this release to that change.
Should some issue(s) arise, and folk need to roll back, this will hopefully
make downstream packagers' lives a bit easier: skip this release altogether.
This addresses LCAP-CR-23-102 (SEVERITY) NONE from the libcap-2.69 security
audit. This addresses Bug 217476.
This addresses C++ std::thread libpsx support. This addresses Bug 218607
reported by Vini Ipsmaker.
Included a test case for this: contrib/bug218607/
This now allows the PSX mechanism to apply to threads launched by loaded .so
plugins. This addresses Bug 219174 reported by Stas Sergeev.
Included a test case for this: tests/b219174.c
The rewrite has significantly reduced the need for any odd linking of the
-lpsx library. Namely, if code makes use of the psx_syscall*() functions,
there is no need for anything other than -lpsx on the link line.
Updated a whole lot of documentation that warned folk about the
-wrap=pthread_create linking need not being needed any more. (Bug 219456)
Linking -lcap and -lpsx still requires some extra care. Updated
cap_get_proc(3) manual page to explain.
Was unable to figure out how to work around the pre-go1.16.* bug related to
cgo and interrupt handling while thread exit with the rewritten libpsx code.
Decided to abandon full support for earlier versions of Go.
Explanation is Bug 219478 which points to old Go bug.
Transitioned key used for signing Go package tags to use the
0D23D34C577B08C4082CFD76430C5CFF993116B1 key.
Very tiny documentation change for the cap package to try again to get a runnable
example to show up on the pkg.go.dev website.
2.71
Reduce the need for CAP_SETPCAP in IAB setting to the specific instances in
which the kernel requires it. This addresses Bug 219169 reported by
Christopher Head.
Resolve subtle libpsx linker flag issue related to -Bsymbolic-functions. This
addresses Bug 219169 reported by Stas Sergeev.
Add new GPG signing key. At this stage, none of the older keys have been
retired. This addresses Bug 218860 requested by David Runge at Arch Linux. Key
details:
$ gpg --fingerprint 0D23D34C577B08C4082CFD76430C5CFF993116B1
pub ed25519 2024-10-26 [SC]
0D23 D34C 577B 08C4 082C FD76 430C 5CFF 9931 16B1
uid [ultimate] Andrew G. Morgan (2024+ libcap signing key)
<morgan@kernel.org>
sub cv25519 2024-10-26 [E]
Expand use of various $(xFLAGS) to building simple binaries in the build tree.
Requested by Pierre-Clément Tosi.
Numerous documentation updates and clarifications.
Added a programming example to the cap package documentation. Exploring how to
embed viewer runnable content in the automatically generated online pkg.go.dev
documentation.
Work around a longstanding glibc segfault annoyance for in-build-tree testing.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/common/libcap | 4 ++--
lfs/libcap | 4 ++--
2 files changed, 4 insertions(+), 4 deletions(-)
@@ -6,10 +6,10 @@ sbin/setcap
#usr/include/sys/psx_syscall.h
#usr/lib/libcap.so
usr/lib/libcap.so.2
-usr/lib/libcap.so.2.70
+usr/lib/libcap.so.2.72
#usr/lib/libpsx.so
#usr/lib/libpsx.so.2
-usr/lib/libpsx.so.2.70
+usr/lib/libpsx.so.2.72
#usr/lib/pkgconfig/libcap.pc
#usr/lib/pkgconfig/libpsx.pc
#usr/lib/security
@@ -24,7 +24,7 @@
include Config
-VER = 2.70
+VER = 2.72
THISAPP = libcap-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 77b72acee53032117ea481e3380d1b497f9264b6193b9523542508c7c3e46070248ca4ed910d35809ce6e52caa60cbb31edb125c47221627eeda35c61bd0914b
+$(DL_FILE)_BLAKE2 = 2c854fd9a714ab1daae3831829b4b7a890a0894953ba88ae1e190274e7fc635275ce4bf2c668b390ba8196248cb1f953fafb3a9af3907e688c1ab40774f7c6e0
install : $(TARGET)