libpsx2-32bit-2.63-150400.1.7 >  A bv޼p9|&lJIlgnіw~7ɻMvxC/NW2:PQ3__7}/AWn&l7YxtkS%=nH^ BS!vy$3cuk+S,.h) 3B^.:mpkc &:b{!iv 53G@,ډI(h{lL&ki5aW|0Q|޳xyk fzV ?c5a51899cf4f50732122439c84adee91e669ef4ea1bc2843fb4258b8d9420061b87567b6576b90e5c2d545c0fe5e8375d2e7df1eKHbv޼p9|PDy9 A;ѻGNL5P8&je"yHc$Rzw gj5V'—,ܐH.Zsϙݱ\:7-2ؾM`sp yOa18V Kцh%3_y?Fr N4-~+-NIpF-%bgLsA8Y4U CWwEIR>7dRk01O G:=o:<7>p>/?/td  O7 M^     &0PXE(n8x9:>,xG,H,I,X,Y,\,],^,b,c-d.e. f.l.u.$v.,w.x.y. /$/(/./pClibpsx2-32bit2.63150400.1.7Library for Capabilities (linux-privs) SupportCapabilities are a measure to limit the omnipotence of the superuser. Currently a program started by root or setuid root has the power to do anything. Capabilities (Linux-Privs) provide a more fine-grained access control. Without kernel patches, you can use this library to drop capabilities within setuid binaries. If you use patches, this can be done automatically by the kernel.bv޴sheep916BSD-3-Clause OR GPL-2.0-onlyhttps://www.suse.com/System/Librarieshttps://sites.google.com/site/fullycapable/linuxx86_64/sbin/ldconfig6<bv޴bv޴2d8cdf1929a1c148dcd585ee2b14246275a5b939fd5a2d74a88bb01c128d5479libpsx.so.2.63rootrootrootrootlibcap-2.63-150400.1.7.src.rpmlibpsx.so.2libpsx2-32bitlibpsx2-32bit(x86-32)@@@@@@@@@@@@    /bin/shlibc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.3.2)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libpthread.so.0libpthread.so.0(GLIBC_2.0)libpthread.so.0(GLIBC_2.1)libpthread.so.0(GLIBC_2.3.2)libpthread.so.0(GLIBC_2.3.3)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3ba@a͟@a4aS`@`r`y|@`X`"y@`U_@__O@_+^G@^0"@^[^]qZX|@Xh@W#Tmeissner@suse.comdmueller@suse.comdmueller@suse.comandreas.stieger@gmx.deinfo@paolostivanin.comdmueller@suse.comchristophe@krop.frtiwai@suse.dedmueller@suse.comdmueller@suse.comdmueller@suse.comdmueller@suse.comdmueller@suse.comdmueller@suse.cominfo@paolostivanin.comtiwai@suse.detiwai@suse.dempluskal@suse.commpluskal@suse.commatthias.gerstner@suse.comfvogt@suse.commatwey.kornilov@gmail.comjengelh@inai.dedimstar@opensuse.orgp.drouand@gmail.com- Use "or" in the license tag to avoid confusion (bsc#1180073)- update to 2.63: * restore errno to zero by the time main() is executed * Consistent psx handling (a panic) for syscalls that return thread dependent status Inconsistend behavior noticed by Lorenz Bauer * Add a test case for a deadlock under investigation in golang * Trim some of the #include file use to make the tree compile more efficiently- update to 2.62: * Bug fix for Go package "cap" and launching * Build cleanups * Documentation updates: cap_max_bits has a man page entry * Recognize default securebits as a libcap mode: HYBRID- libcap 2.61: * Better error handling of the numerical arguments for capsh and setcap * Fix executable mode for all of the .so files. There were two situations where this was failing (with a hard to debug SIGSEGV inside libc) * Added an example of a shared library object with its own file capability * Fix the top-level include for Make.Rules in the contrib/sucap example application * Add support for running constructors at libcap.so start up time when running as stand alone binary. - includes changes from 2.60: * Some build, code linting fixes, the addition of the cap_fill_flag() API and a memory latency optimization * General improvement in thread safety for libcap and cap package * Minor API change replacing libcap:cap_launch_*() void returning functions with int + errno status returns. * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API * New features for capsh: --quiet, -+ and =+ arguments - add upstream signing key and verify source signature- update to 2.59: * Fixed a potential libcap memory leak by adding a destructor * Major improvement is that there is a path for Linux-PAM compliant applications to support setting Ambient vector Capabilities via pam_cap.so now * Added libcap cap_proc_root() API function * Added color support to captree * Fixed contrib/sucap/su to correctly handle the Inheritable flag * capsh enhancements * getcap -r / now generates readable output * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now runnable as standalone binaries * The module pam_cap.so now contains support for a default= module argument * Enhanced capsh --suggest to also compare against the capability value names and not just their descriptions * Added capsh --current support * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su * Fix for a corner case infinite loop handling long strings * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs * Added a Go utility, captree, to display the process (and thread) graph along with the POSIX.1e and IAB capabilities of each PID{TID} tree.- update to 2.51: * Fix capsh installation * Add an autoauth module flag to pam_cap.so * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one capability flag to another. * --explain=cap_foo: describe what cap_foo does * --suggest=phrase: search all the cap descriptions and describe those that match the phrase * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945) * extend libcap to include cap_prctl() and cap_prctlw() functions to regain feature parity with Go "cap" package. These are only needed when linking against -lpsx for keepcaps POSIX semantics. * this likely requires substantial application changes to make Ambient capability support usable in general, but doing our part for the admin. * Add a test case for recent kernel fix * Go pragma fix for convenience functions in "cap" module- Fix a broken symlink. libcap-devel installs libpsx.so but didn't install the library it's pointing to.- Add explicit dependency on libcap2 with version to libcap-progs (bsc#1184690)- update to 2.49: * Implement cap_func_launcher() and cap.FuncLauncher(). * More robust "psx" redirection for nocgo compilation - the documentation for the cgo implementation is now included in the nocgo one because the go.dev automated documentation builds the docs from the nocgo version. * Lots of documentation cleanups and added a few man pages: for IAB and Launching. * Some general no-op License changes that might cause folk to notice but only for formatting reasons. These were initially inspired by some lawyerly interactions, but I ended up rolling back half of them because they confused automated software infrastructure.- update to 2.48: * More uniform use of $(MAKE) in Makefiles * No longer include symlinks in the git tree * Provide support for make GOLANG=no ... * Provide support for pointing at a specific build of the go binary * camelCase the contrib/seccomp/explore.go program * A number of documentation fixes to man pages and source code comments * Last use of GO major version 0- update to 2.47: * Restructured gowns to default to uid base of getuid(). * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit. * Improve the usage and diagnostic message for setcap * Documentation fixes, license declarations, example updates- update to 2.46: * The bulk of this release concerns fixes and improvements to libpsx * Fix the capsh == argument handling and add a test case * Added build support for systems that do not support libpthread * Added build support for not building shared libraries- update to 2.44: Generally, this is a release to help package builders: no functional change to any of the generated code just documentation and make related fixes.- update to 2.43 * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it. * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets * Clean up a binary from the distribution * Added some more release time checks for non-git tracked files. * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.- Update to version 2.42: * Closed a potential issue with "libcap/psx" Go package and errno * Documentation updates * Minor optimization for cap_to_text() and (*cap.Set).String() * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap * Multiple fixes * Support Go module abstraction * A new kernel capability: CAP_BPF * Better support for cross-compilation * pam_cap now honors PAM_REINITIALIZE_CRED * implements cap_launch functionality- Update to version 2.32: * Bug fix for fakeroot incompatibility (boo#1162014) * Slight perf improvement for cap_get_bound(). * C++ support for psx header inclusion. * Some new testing features for capsh- Update to version 2.31: * primarily a documentation update * fix libpam.pc to not require libpsx.pc * changed the text format of the default output of getpcap- Build using -ffat-lto-objects for static library- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460): * BUGFIX: arm and i386 fixes C and Go setgroups choice - used wrong syscall in 2.29. * cleaned up make clean and make install to actually work as intended * updated Gentoo libpsx.pc file from Lars Wendler * refactored the way libpsx linkage with libcap performed mutual discovery. * Previously (2.28) libpsx had an API call overridden by libcap using weak linkage function in libpsx. In 2.30 this is reversed, namely libpsx provides the stronger function and libcap has a weak "no-op" version. * a bit more consistency in handling the 'all' sets in libcap (C) and libcap/cap (Go). Namely, they both dynamically discover the number of capabilities named by the kernel and use this as the definition of 'all' for the current runtime. + libcap (C) exports cap_max_bit() to export the number of supported capabilities + libcap/cap (Go) exports cap.MaxBits() for this same value. - For changes for older releases see: * https://sites.google.com/site/fullycapable/release-notes-for-libcap - Add glibc-static-devel as build requirement as tests need it - Install libpsx.a as it seems to be needed in some cases: * https://bugs.gentoo.org/703912- Remove pam_cap (bsc#1150522) since this PAM module is a bad idea, security wise.- Use %license (boo#1082318)- Enable PAM pam_cap.so module- RPM group association fix- Update to versison 2.25: + Recover gperf detection in make rules. + Man page typo fix. + Tweak make rules to make packaging more straightforward. + Fix error explanation in setcap. + Drop need to link with libattr. It turns out libcap wasn't actually using any code from that library, so linking to it was superfluous. - Drop libcap-nolibattr.patch: fixed upstream. - No longer add %{buildroot} to all variables for make install the Makefile learned about the meaning of DESTDIR.- Update to version 2.24 * Fix compilation problems (note to self, make distclean && make, before release) * Some make rule changes to make uploading a release to kernel.org easier for me. * Tidied up some documented links. - Update libcap-nolibattr.patch - Add pkg-config build requirement; libcap now provides a pkgconfig file - Clean up specfile - Move libraries and binaries to /usr because of #UsrMove/bin/sh2.63-150400.1.72.63-150400.1.7libpsx.so.2libpsx.so.2.63/usr/lib/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP4:GA/standard/f6e7a90859083d944cab42aa406c5578-libcapcpioxz5x86_64-suse-linuxELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux.so.2, BuildID[sha1]=1966b07bba3f62f4ddb0f21c6866149e92290221, stripped PRRRRRRR R R R RRutf-8a900ffc76eb2145a0de44ca0b3f862eed4b3dcb37eb0f87da7d8d61b1269ab3e? 7zXZ !t/7y] cr$x#Faڗw e&3ELT`ş?dW_RC5-ݓNXc89|CK=Դ^HWk~\ 6h᷄?e?Vm8Tr,D]WJ"MO0̐:p9ԡ~"/^`Oi_n.x&0Y@)V#^Z20(qX_N_NBkb7TxJԪ[-Uhڿ}v}y_4KĚx !cp%ߏkV߈[&oiqEm|;P4,H l|7_=ڵz8G)/K(i7_T B`W [M$Z`86 -I(w !/΀5[.|xbp|`ju~-l@Qx$*7~'1Y2uf=5s4;$!n{2]x>Ńˠ$ƹr)ToD:x ۭɶh^m q{w7z!;#To}+NN*L\5Z S4g`(`y\wk}rX3 Ibvڔm{g OW-cA?pj{D' r3P(>%(/|i+CV¿2KP&M㭨(X^tkIy׿u&>+<!Hۂ栌5A׽JC}źBNr~X3tko6a4W^S.s(+t|#K 膋|^ޝmX2E/CG-{הeAOSxte Nw: , ;*i)E5'`M:*Xn1TjO+Uhw'#BO4< cSNCg9tvz4W]<Ya6f4טּYy]mR Tg/(9\IXjJv\!܆yS88&-]cz|jծO"_sMgpI:׶qztE782j$K˨Aw}.W֯= ZkAgfpYf9V9} -5͢0ye`)G;e*+Iu_¾-ʟܭjpM 2JrQ~Qziw?)wlGd;)ws(;P,Te[3 ~@mF|[cS=C_W;NG9q;en)P3Jf &R%E%fkݙY:hUj1ĪyNKa5)3 ?$`^l^B<R$Q\izR6F\S_Z1oeL ؉-7*PlTE D'>Z73,"KZ,-+@L KJΩAѭ:q9hiQ#z`ߗ A3Ȇd%[ ĵ.3'!{T@|;'"[\?=n fVz[X*>b{fcwT.M[; T'skww$@Ovƣ#J_ɷreEc*3;ҾRT/4B[wEX 2eJe xAO(`]MU~p @v0vH=0 ˢyIu'|j7\% 5(Һݔ| 6'rt 8heNqUmUĔr 4 _ !fȜHX˽dbR#0wKj@ =ԫKvpyV= <ϭP%:5FVv=wIJvFnim?G XOq?՜[}awҺRR?[< [' ɿ/jyoLlkt!Xfx*z~GыE2 \(N",ΔN[Et]Mpgyhze&J+'8Bhwz͊p0vZ"Ecsx&L<@P){ T}܌{p/ՊŸN{#q`vG}V gFկ\wαv껦\a1=I6*Ț!pxK+eX {m1I08ZpЂ`)D{JN"rv|i/S+A@LMPk_x,V>SP.%omAV5W -u>Zl5 M}c zp4=\Zc¿*?F!L3 go5aI 9 ێ?ئm}["_[/z&Qn@'pkQ+v2[Nuߤ'"VCg=$p_Tq$߮exj]Ӆ:2z1UaCq@ " >7bhh3<J*Ӹ׷Y_=mӍm(RJxczH&SVb9T}[W"+KyEA5lѨ%̻J` ժvoDrVٌ{͈]/|T!i wA)lZ EG,~)s!̩e:B[Ccdv(X4,Lv.|8uCPJv#QT~CGjN3`m@~4/}Q ^ HL_H7ˑ_zj3X`Ɖ`<]vā6k|tN) AY;y)3u_F?=/LF@7hdĽJRQLV3}DLqLNڋrzܗX5*IE& t2W& 0rWSwylIOWG6?/9}lJ >-h2ݛn[S󑡬m!,6<( FQTQ+H~aR?A_PME熸eu'Gr 45eWSh ?H1cŗHK&]~ ,t-O~≑™Hv_ dPLX;c ̑欁W9Z-ed'g&ƕ$>1KofRh{Rߘx OV<q,*)"QM͟#LnKBz!S)_v P̪TEaO`5NJNH}^ ޥP۟Xm%>o׼(IK4jFkzx| U#.Oyok&[\29mhv߆'il0|*.J9+_?ىv:`b>gi#T3>@;]>%PNSWxMoUV9PS;3mʍ[kI%.$)FwUஐzp} Kz N3ʇ1Dm<C.p="IX6ZdxMI b} Sx$0bIxɲV!"E@RV2##SWs -Y -?S+99}.Z_W;=ҵ}Nk\_,J]*;sz`S|