Request 1177532 (accepted)

This request supersedes: request 1090158 (Show diff), request 1176915 (Show diff)

Overview

Request 1177532 accepted

- update to 2.70:
* setcap changes to make it harder to set invalid file capabilities
* Lots of documentation fixes
* Fix c89 compilation syntax for the C code in the libraries
* libpam has deprecated providing the _pam_overwrite() function,
so use memset() instead

Created by msmeissn 6 months ago
In state accepted
Supersedes 1090158 1176915

Submit libcap

Dominique Leuenberger (dimstar) - over 1 year ago

reviewer

[   25s] pam_cap.x86_64: E: pam-file-unauthorized (Badness: 10000) /usr/lib64/security/pam_cap.so (sha256 file digest default filter:de56840bdc5e19fc0f7be955a94da2b215be4138f87d78707106d4efa398ffcb shell filter:<failed-to-calculate> xml filter:<failed-to-calculate>)
[   25s] Packaging new PAM modules requires a review and whitelisting by the SUSE
[   25s] security team. If the package is intended for inclusion in any SUSE product
[   25s] please open a bug report to request review of the package by the security
[   25s] team. Please refer to
[   25s] https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for
[   25s] more information.

Dominique Leuenberger (dimstar_suse) - over 1 year ago

reviewer target maintainer

rpmlint update pending

Ana Guerrero (anag+factory) - 6 months ago

reviewer

[   17s] pam_cap.x86_64: E: pam-file-unauthorized (Badness: 10000) /usr/lib64/security/pam_cap.so (sha256 file digest default filter:0fe0fcb0521ff00c67adfd405967abb858b52a746d335937d124f7a05a5ff8c7 shell filter:<failed-to-calculate> xml filter:<failed-to-calculate>)
[   17s] Packaging new PAM modules requires a review and whitelisting by the SUSE
[   17s] security team. If the package is intended for inclusion in any SUSE product
[   17s] please open a bug report to request review of the package by the security
[   17s] team. Please refer to
[   17s] https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for
[   17s] more information.

cc: @AndreasStieger @tiwai @dirkmueller