)]}' { "log": [ { "commit": "9eb56596eef5e55a596aa97ecaf8466ea559d05c", "tree": "e504045cf6c7a85f77d01ac6054c9f92595739fb", "parents": [ "22569c7cfb428edc5ae05cf631a25227087e74d0" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Sep 26 18:20:33 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Sep 26 18:20:33 2021 -0700" }, "message": "Up the release version to 2.59\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "22569c7cfb428edc5ae05cf631a25227087e74d0", "tree": "d004dfe3099823900b618185db98725c7c9565db", "parents": [ "6643c636e8ab44add497f97e479ad8a931d43adf" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Sep 24 10:58:05 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Sep 24 10:58:05 2021 -0700" }, "message": "Fix to \u0027make clean sudotest\u0027 reliably\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "6643c636e8ab44add497f97e479ad8a931d43adf", "tree": "19233d725b9e5fcde9833198a175c6f21a08af02", "parents": [ "f8b754967348052ca92c6d2c95551cbbb1e1d387" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Sep 24 10:46:24 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Sep 24 10:46:24 2021 -0700" }, "message": "Recognize that NULL is an invalid cap_t and cap_iab_t.\n\nThis was a regresssion introduced in libcap-2.55. Fixed in libcap-2.59.\nAdded a cap_launch NULL test too. Comparing against NULL would cause a\nSIGSEGV against these library revisions.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "f8b754967348052ca92c6d2c95551cbbb1e1d387", "tree": "2bbac9e83d1de39fae8f6c91838db57232d3d730", "parents": [ "dba6efc51b2cb4ee97e34575d298cdbb58cfed68" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Sep 23 20:46:31 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Sep 23 20:46:31 2021 -0700" }, "message": "Update example to avoid reference to deprecated Compare function.\n\nIn 2.54 (*Set).Compare() was deprecated in favor of (*Set).Cf(),\nso update the top level comment to reflect the preferred API.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "dba6efc51b2cb4ee97e34575d298cdbb58cfed68", "tree": "4b432590c1cd1e9f47773d03ca9b6a08de7ecfdd", "parents": [ "33a6686e2bc126916145f01246ee6be80669dcdb" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Sep 22 18:50:53 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Sep 22 18:57:44 2021 -0700" }, "message": "Spelling fix.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "33a6686e2bc126916145f01246ee6be80669dcdb", "tree": "5c3f8cfd8f09bef2bfe8395dea0d832cad22c008", "parents": [ "01627eae86cc299de459067614e6964b63bb6bcb" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Sep 17 21:07:19 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Sep 17 21:07:19 2021 -0700" }, "message": "More compliant cap.Differs documentation.\n\nDeprecation has a stylized comment format as per go.dev.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "01627eae86cc299de459067614e6964b63bb6bcb", "tree": "1cdb2ed87a7a739e6a119920792cea875f1ad571", "parents": [ "0efe94c6ec601a5d1e84819e87618c5837395709" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Sep 17 19:35:29 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Sep 17 19:35:42 2021 -0700" }, "message": "Up the release version to 2.58\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "0efe94c6ec601a5d1e84819e87618c5837395709", "tree": "0c5c56fc28418a9ac75b085eee74b428e8ab978c", "parents": [ "9f9602215ccf205cca1b0a495db9eae18d204265" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Sep 14 21:57:05 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Sep 14 21:57:05 2021 -0700" }, "message": "Fix typo in capsh.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "9f9602215ccf205cca1b0a495db9eae18d204265", "tree": "e3e58e5f9e7f2a29b8ea01ece2a2960d47cfbe69", "parents": [ "2c3b8949f4374db5285865ad8ce1bdf49d6f24c6" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Sep 14 20:54:00 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Sep 14 20:54:00 2021 -0700" }, "message": "Add some debugging info for the pam_cap.so deferred callback.\n\nAs with the other D(()) entries in the pam_cap.so module, this\nis enabled if the /* #define PAM_DEBUG */ comment is uncommented\nat the top of the pam_cap.so file.\n\nI tried this on a sample app and it didn\u0027t actually follow the\ndocumentation:\n\nhttp://www.linux-pam.org/Linux-PAM-html/adg-interface-by-app-expected.html#adg-pam_end\n\nwhere no pam_end() call was made to terminate the fork()ed copy of the pamh\nvalue. That app needs to be fixed.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "2c3b8949f4374db5285865ad8ce1bdf49d6f24c6", "tree": "3007f0d16aea83459af344dc8d568fc1202c5524", "parents": [ "783d9b5c5f5038cbbe166c0cdf6d356edb1c9f7c" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Sep 14 19:36:56 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Sep 14 19:45:59 2021 -0700" }, "message": "Another attempt at supporting Ambient vector setting from pam_cap.so.\n\nWhile the session idea worked with contrib/sucap/su.c, it failed on\nmore traditional PAM apps. For a second (likely last) attempt to find a\npath, I\u0027ve deleted the session support and now attempt to do the setting\nvia a PAM data item cleanup() callback. In the contrib/sucap/su.c code,\nevolved from the original SimplePAMApps \u0027su\u0027, there is a\n\n pam_end(pamh, PAM_SUCCESS | PAM_DATA_SILENT)\n\nfrom within the fork()d launcher code, so I hope this convention is\nstandard for all the PAM apps that came after.\n\nThe suggested config for this module for an app, that wants to support\nthe Ambient vector, is thus now:\n\n #%PAM-1.0\n auth required pam_cap.so keepcaps defer\n auth required pam_unix.so\n account required pam_unix.so\n password required pam_unix.so\n session required pam_unix.so\n\nThis is all part of an effort to address:\n\n https://bugzilla.kernel.org/show_bug.cgi?id\u003d214377\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "783d9b5c5f5038cbbe166c0cdf6d356edb1c9f7c", "tree": "a810f6633cbf682176b9009f852ef4227651c867", "parents": [ "dbd9481fa0e977fdba5b4d9bb8a912e28497fb28" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Sep 14 17:26:33 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Sep 14 17:28:44 2021 -0700" }, "message": "Not sure why I didn\u0027t include this line before!\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "dbd9481fa0e977fdba5b4d9bb8a912e28497fb28", "tree": "99a4c64522ab9cdbbee176329622384796a4fc5c", "parents": [ "fc6253b9de68dafae1927b2bcbfcef9e9ec6e05a" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Sep 13 21:10:53 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Sep 13 21:10:53 2021 -0700" }, "message": "Simplify the contric/sucap/su structure.\n\nAlso include the aggressive default CFLAGS, and fix the many many\nissues it uncovered. (Honestly, it was a wonder it worked at all\nbefore.)\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "fc6253b9de68dafae1927b2bcbfcef9e9ec6e05a", "tree": "4ff7116780d9bc5ab717f4c4a539e97a5380af17", "parents": [ "a3446b5c6e0879b289287c9a87a57cbdc95e99da" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Sep 13 21:08:42 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Sep 13 21:08:42 2021 -0700" }, "message": "Add PAM \"session\" support to pam_cap.so.\n\nThis is an attempt to address:\n\n https://bugzilla.kernel.org/show_bug.cgi?id\u003d214377\n\nThe basic structure is you configure PAM with a config like this:\n\n#%PAM-1.0\nauth required pam_cap.so use_session keepcaps\nauth\t\trequired pam_unix.so\naccount\t\trequired\tpam_unix.so\npassword\t\trequired\tpam_unix.so\nsession\t\trequired pam_unix.so\nsession optional pam_cap.so\n\nHere the \"auth\" part prepares the application with \"keepcaps\", and the\n\"use_session\" instructs the module to apply any IAB tuple for the user\nat session open time and not during the setcred (auth) flow.\n\nThis has been tested against the contrib/sucap implementation of su.\nThe \"use_session\" support should work with more standard PAM enabled\napps too, but I\u0027ll wait for some positive feedback (see the bug)\nbefore declaring it stable.\n\nFWIW the contrib/sucap/su app also supports this config for Ambient\nvector setting (without a \"session\" invocation of pam_cap.so):\n\n#%PAM-1.0\nauth required pam_cap.so\nauth\t\trequired pam_unix.so\naccount\t\trequired\tpam_unix.so\npassword\t\trequired\tpam_unix.so\nsession\t\trequired pam_unix.so\n\nbut that is because the sucap/su app is more tightly integrated with\nlibcap than the standard PAM apps.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "a3446b5c6e0879b289287c9a87a57cbdc95e99da", "tree": "f2731a8a700685eb2db8aaac44555766577f25d3", "parents": [ "c9f6bdda4c714ceeeaa17d473dd649fd41cc245d" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Sep 12 19:27:21 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Sep 12 19:27:21 2021 -0700" }, "message": "Free _cap_proc_dir on exit.\n\nCredit to yan12125 for finding this bug:\n\n https://bugzilla.kernel.org/show_bug.cgi?id\u003d214373\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "c9f6bdda4c714ceeeaa17d473dd649fd41cc245d", "tree": "1cb2adcec49c1137c12359c575b7d583960cbf76", "parents": [ "280110a9caf8510af9775bb75942d050134c12d9" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Sep 12 18:50:55 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Sep 12 18:50:55 2021 -0700" }, "message": "kdebug shouldn\u0027t require sudotest to build uns_test binary.\n\nPart of the reason for the QEMU kernel test is to fully test\nthe library against kernels without requiring sudo.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "280110a9caf8510af9775bb75942d050134c12d9", "tree": "6cfa7322efb0f849a82cff8254e218d0ce238d4f", "parents": [ "1dd3fb43123ccf257491c85bb336407f39eaff9d" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Sep 11 19:07:40 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Sep 11 19:07:40 2021 -0700" }, "message": "Recover the kdebug make rules.\n\nThese were broken as a result of delaying building the test and sudotest\nbinaries until they were actually needed.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "1dd3fb43123ccf257491c85bb336407f39eaff9d", "tree": "4f045bd02fa96978946c72eaa0b1e9017026d7ff", "parents": [ "fb9b1d69c47af4edd278ab8b08d1f9065afb5e35" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Sep 11 16:13:56 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Sep 11 16:13:56 2021 -0700" }, "message": "Add in something the builder can override to augment the GO builds\n\nI\u0027ve been looking at reasons packagers are not building the Go binaries\nand found this with respect to RPMs:\n\n https://github.com/rpm-software-management/rpm/issues/367\n\nThere has been no easy way to inject the otherwise unneeded workaround:\n-ldflags\u003d-linkmode\u003dexternal for building (which, strangely, generates\nsome sort of warning and gratuitously links glibc to an otherwise\nstatic build), but seems to work.\n\nUntil RPM supports Go\u0027s native \u0027.note.go.buildid\u0027, and RPM requires\n\u0027.note.gnu.build-id\u0027 on binaries, I guess this can work around it:\n\n GO_BUILD_FLAGS\u003d\u0027-ldflags\u003d-linkmode\u003dexternal\u0027\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "fb9b1d69c47af4edd278ab8b08d1f9065afb5e35", "tree": "780867d2c278f348c9d88935f94c6c07c9407a47", "parents": [ "893c134ca5cd6fc33ac19d8dbb9d985067d2e66b" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Sep 10 22:56:09 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Sep 10 22:56:09 2021 -0700" }, "message": "Update pam_cap .gitignore file\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "893c134ca5cd6fc33ac19d8dbb9d985067d2e66b", "tree": "5bac1e269aa6b1624bf83601ec627e426c62e422", "parents": [ "e7297c1925d827d3932dc7ed96554a1d94c17dd7" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Sep 10 16:11:57 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Sep 10 16:11:57 2021 -0700" }, "message": "Another missing dependency for make -j13\n\nOne more missing dependency for pam_cap.so building.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "e7297c1925d827d3932dc7ed96554a1d94c17dd7", "tree": "1a72c0636389200d7843aa645fe749e26ffdf0fa", "parents": [ "39067301976057bc8915e4025f6715432a5b0c74" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Sep 10 16:02:28 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Sep 10 16:02:28 2021 -0700" }, "message": "More standard deprecation comment for cap.Compare and cap.IABInit\n\nBased on what I see on go.dev, there seems to be some preferred\ncomment style for deprecating a function. Use it to help spread\nthe word.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "39067301976057bc8915e4025f6715432a5b0c74", "tree": "96103e737598499c06dab0f2b94ff21d850f347a", "parents": [ "b35370f7f65387c02c0542d6c36144ca0a0e5efd" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Sep 09 13:57:36 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Sep 09 13:57:36 2021 -0700" }, "message": "Up the release version to 2.57\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "b35370f7f65387c02c0542d6c36144ca0a0e5efd", "tree": "9600028dc42978fb857a799ad7e4e561d3f7695c", "parents": [ "8434c10a690f3352ff5d8cb011859502718a60b7" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Sep 07 13:14:54 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Sep 07 13:14:54 2021 -0700" }, "message": "Implement --strict capsh argument.\n\nUp to this point, capsh hides some complexity concerning raising\nthe CAP_SETPCAP in order to raise inheritable and drop bounding\nset values. This made it harder to explain some aspects of\ninheritance, and I ran into that detail writing this:\n\nhttps://sites.google.com/site/fullycapable/why-didnt-that-work#h.z7rwbcazhr4r\n\nRefactored capsh.c to clean up some buggy code, and also fix some\ndocumentation, including reference to the --strict argument.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "8434c10a690f3352ff5d8cb011859502718a60b7", "tree": "0984bdf323e0d94e8a58b2611c90cf75569b202e", "parents": [ "8b3ffc23b6cbe42d2eac5a3c0d970fd26472a246" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Sep 07 10:47:45 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Sep 07 10:47:45 2021 -0700" }, "message": "Be more systematic about POSIX.1e value group names\n\ncap.Set\u0027s have Flag component Values\ncap.IAB\u0027s have Vector component Values\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "8b3ffc23b6cbe42d2eac5a3c0d970fd26472a246", "tree": "54932fb39f39721eaf33585f9e57d11fa6a59aba", "parents": [ "f223de46154a3d2644914ea358d5c69b36770459" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Sep 05 19:50:07 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Sep 05 20:07:48 2021 -0700" }, "message": "Fixed parallel make issues\n\nTried make -j12 and these fixes were needed.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "f223de46154a3d2644914ea358d5c69b36770459", "tree": "40c36b45a8fa93b2232eca6a6834ad755089fc38", "parents": [ "967b3a0a95223036478e7d991ee96fa42912803a" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Sep 05 19:45:05 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Sep 05 19:45:05 2021 -0700" }, "message": "Treat ENOTSUP as an expected error for getcap.\n\nThings like /proc/* files don\u0027t support capabilities on them and\nif getcap looks at them it generates a lot of errors. Treat it as\nequivalent to there being no capability on the file.\n\nThis addresses\n\n https://bugzilla.kernel.org/show_bug.cgi?id\u003d214317\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "967b3a0a95223036478e7d991ee96fa42912803a", "tree": "3e452269cd7b58b8a65708e98da789635e159307", "parents": [ "5ef14d07420c299ecd8de96928a5d1ce1e232df3" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Sep 05 11:42:28 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Sep 05 11:42:28 2021 -0700" }, "message": "Add --mode query support to capsh\n\nThis addresses the feature request:\n\n https://bugzilla.kernel.org/show_bug.cgi?id\u003d214319\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "5ef14d07420c299ecd8de96928a5d1ce1e232df3", "tree": "5935e55ff1d193d27853e287b033dc8f824f1df8", "parents": [ "99799844ad9272d43892881d1090369e6032aec2" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Sep 04 14:05:11 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Sep 04 14:05:11 2021 -0700" }, "message": "Refactor top level Makefile to reduce redundant building\n\nMake build a bit quicker for folk that don\u0027t want to run tests.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "99799844ad9272d43892881d1090369e6032aec2", "tree": "ddd8161d344517483cf315b5e2065909cc443332", "parents": [ "3249c2696468bc82ec45f4fcabddc390473a45da" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Sep 04 11:42:24 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Sep 04 13:26:56 2021 -0700" }, "message": "Don\u0027t build the tests/binaries until we want to run them\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "3249c2696468bc82ec45f4fcabddc390473a45da", "tree": "b685e9aef2a7cc29f08b6fb782b4069db3edca7b", "parents": [ "0f286b584ebe7019ba33cc48ad9e4ad8efb5b23c" ], "author": { "name": "David Seifert", "email": "soap@gentoo.org", "time": "Sat Sep 04 10:39:34 2021 +0200" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Sep 04 11:50:33 2021 -0700" }, "message": "Build system fixes\n\nSummary:\n- Always keep $(WARNINGS) when overriding CFLAGS\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "0f286b584ebe7019ba33cc48ad9e4ad8efb5b23c", "tree": "2a9a224bb961e07e88629b961b92265814b290e8", "parents": [ "c54a087429f96d0ab4561d1aa3bb55a802c226a2" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Sep 02 20:03:32 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Sep 02 20:03:32 2021 -0700" }, "message": "Up the release version to 2.56\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "c54a087429f96d0ab4561d1aa3bb55a802c226a2", "tree": "9c65fcab6b1c1b49a2bd629202c8f6043e99b176", "parents": [ "f245f03f430482d972b5934d66bd4a31616f95ad" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Sep 02 20:02:29 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Sep 02 20:03:09 2021 -0700" }, "message": "Document latest option for captree in its man page.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "f245f03f430482d972b5934d66bd4a31616f95ad", "tree": "7778162681348b2db7c179191b37867ad29c22b4", "parents": [ "2a3984fe0fc12880e15760b35733db6031b0a652" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Sep 02 18:25:55 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Sep 02 18:25:55 2021 -0700" }, "message": "Make captree use --color on any terminal by default.\n\nDisable with --colo[u]r\u003dfalse or pipe into something else.\n\nEx. \u0027captree | cat\u0027\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "2a3984fe0fc12880e15760b35733db6031b0a652", "tree": "4da9fb1b53b64fd5873af942e982c2704cf1a583", "parents": [ "142ad758ffaaec1b4c4e5e7c61287a943f21ff7b" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Sep 01 22:34:47 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Sep 01 22:34:47 2021 -0700" }, "message": "Avoid disecting sub-trees of processes in captree output.\n\nAdded --color as an argument to make it easier to spot what you\nare looking for in the output.\n\nThis addresses item (2) of:\n\n https://bugzilla.kernel.org/show_bug.cgi?id\u003d214269\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "142ad758ffaaec1b4c4e5e7c61287a943f21ff7b", "tree": "345879a2acb9733db0ef89194a2fd0b67bcb000e", "parents": [ "0cba26fca376c34fa715b31b915ea0adee5d77ce" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Sep 01 20:22:45 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Sep 01 20:22:45 2021 -0700" }, "message": "Don\u0027t display duplicate subtrees with captree.\n\nThis addresses issue (1) of:\n\n https://bugzilla.kernel.org/show_bug.cgi?id\u003d214269\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "0cba26fca376c34fa715b31b915ea0adee5d77ce", "tree": "89ffdfc6f86d14e66dd261a057e9829a779c2612", "parents": [ "2762c2c1a8c98d9012fcd40f20d133493a0b3219" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Sep 01 20:08:14 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Sep 01 20:08:14 2021 -0700" }, "message": "sucap/su should start with an empty INHERITABLE flag.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "2762c2c1a8c98d9012fcd40f20d133493a0b3219", "tree": "7b72d2b1c2660fed4549bc843d8fca58c530627d", "parents": [ "41f065cdc95f8bbe79ccba94cff20cd5434f7d2a" ], "author": { "name": "David Seifert", "email": "soap@gentoo.org", "time": "Wed Sep 01 16:53:17 2021 +0200" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Sep 01 19:17:05 2021 -0700" }, "message": "Canonicalize build system\n\n* Respect user\u0027s CFLAGS/CPPFLAGS/LDFLAGS\n* Respect $(MAKE)\n* Remove CPPFLAGS from link rules\n\nNote: for in-tree built test binaries, where we build --static,\n we do not apply LDFLAGS: we want to limit external\n dependencies in general; and users\u0027 LDFLAGS have a strong\n tendency to conflict with --static for linking.\n\nWork in collaboration with David Seifert (ie, he wrote most of it).\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "41f065cdc95f8bbe79ccba94cff20cd5434f7d2a", "tree": "c87cce3b141776af1360fdd830165870bbe86fdd", "parents": [ "2d776b10dc9f4b33ec3778f6d4fddc51f9b9dcde" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Sep 01 07:25:18 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Sep 01 07:25:18 2021 -0700" }, "message": "cap_iab.3 doc fixes and cleanup\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "2d776b10dc9f4b33ec3778f6d4fddc51f9b9dcde", "tree": "71b5e8a699c8b9c821bb430706980b9ab610b532", "parents": [ "15a3d49bf12b24c0a353525acb93e188f67e7581" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Sep 01 06:52:31 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Sep 01 06:52:31 2021 -0700" }, "message": "Permit root to run test_pam_cap without arguments.\n\nThis fixes a bug preventing \u0027make test\u0027 from working when invoked by root.\nBug reported by David Seifert:\n\n https://bugzilla.kernel.org/show_bug.cgi?id\u003d214257\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "15a3d49bf12b24c0a353525acb93e188f67e7581", "tree": "0188c91f43fa103af90a60bfe74c49cef400d152", "parents": [ "264b784089bfb56b0039c1ebfc5e92912f0284ce" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Aug 31 19:05:59 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Aug 31 19:05:59 2021 -0700" }, "message": "Move $(LDFLAGS) earlier in build command lines.\n\nAs explained (thanks David Seifert) there are some LDFLAGS that\nneed to precede actual linked libraries. For example, -Wl,--as-needed.\nGiven this, I\u0027ve tried it and it appears to work for the default\nbuild cases as captured in \u0027make distcheck\u0027.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "264b784089bfb56b0039c1ebfc5e92912f0284ce", "tree": "596ce4f1e5d3ca95ea5b1f5c8df425d77e98e88f", "parents": [ "f5ae31ebd3d49a064cb85ccd62a75198883cec3b" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Aug 31 06:57:54 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Aug 31 06:57:54 2021 -0700" }, "message": "Resurrect the $(WARNINGS) for the target build\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "f5ae31ebd3d49a064cb85ccd62a75198883cec3b", "tree": "037c0884e7be60392381a6b6e60baf587a84b989", "parents": [ "2bfe36c9999c852c79c0bba1c31b25285326b91d" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Aug 30 20:01:13 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Aug 30 20:02:22 2021 -0700" }, "message": "Be more consistent with make variables.\n\nNoticed that we weren\u0027t applying the same amount of flag discipline\nto local BUILD_* tool rules. Fixing that, I see we\u0027ve been carrying\na source code issue in libcap/_makenames.c for a while. (FIXED).\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "2bfe36c9999c852c79c0bba1c31b25285326b91d", "tree": "9df1dafab0b235189b48654c2c3213dabe785e27", "parents": [ "b9d56654dee6c8998fa477ffb20e8a5d01044f96" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 29 18:54:03 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 29 18:54:03 2021 -0700" }, "message": "Up the release version to 2.55\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "b9d56654dee6c8998fa477ffb20e8a5d01044f96", "tree": "b06c07860f013c7365c2a0e7b45197b1fcd29455", "parents": [ "b972c50c0989a81da308886e5d602c272e90f8cb" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 29 15:36:06 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 29 15:43:17 2021 -0700" }, "message": "Update man pages.\n\nSome fixes, some more efficient URLs, some more coherrent cross-references.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "b972c50c0989a81da308886e5d602c272e90f8cb", "tree": "4c6e9b3560b6c555776dd127735d749322a47b94", "parents": [ "61b2fcc4510641ffd691d8e5a82e968b458f0cb9" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 29 15:09:59 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 29 15:42:17 2021 -0700" }, "message": "Add captree command line options and support process by name.\n\nAdd some features to captree. I plan to post a companion article\nhere:\n\n https://sites.google.com/site/fullycapable/captree\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "61b2fcc4510641ffd691d8e5a82e968b458f0cb9", "tree": "8f70e030e250d8c442d4d37d90be19e7acde6de8", "parents": [ "6c38eb78d96a60a9503dc5c89ade67b65778fed9" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Aug 28 15:58:16 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Aug 28 16:50:35 2021 -0700" }, "message": "Make sudotest more robust against untestable environments\n\nI\u0027m setting up some testing environments and they are not all\ncreated equal.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "6c38eb78d96a60a9503dc5c89ade67b65778fed9", "tree": "b8965a83cc5ddfff0ba32e1175cf5eb78596e382", "parents": [ "43365cf01c64b530e7a3d62214247e1aa042414d" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Aug 28 09:43:51 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Aug 28 09:43:51 2021 -0700" }, "message": "Avoid the build server failure.\n\nI figured out that the key ingredient to reproducing this issue\nwas:\n\n make COPTS\u003d\"-D_FORTIFY_SOURCE\u003d2 -O1 -g\" clean test\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "43365cf01c64b530e7a3d62214247e1aa042414d", "tree": "e431eb42a1f6013c2ce6b50f40f62fc3c4d94822", "parents": [ "de1130dbfe6d4ce99422b11cac147d39448bcd40" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Aug 27 21:01:46 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Aug 27 21:01:46 2021 -0700" }, "message": "Still unclear where cap_test is crashing.\n\nAdd more debug logging.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "de1130dbfe6d4ce99422b11cac147d39448bcd40", "tree": "61ba110f4fa18301740b582732dce6184a0d8038", "parents": [ "b56400f81ddd42e0e57372c957e668e6d5a72834" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Aug 27 13:55:11 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Aug 27 13:55:11 2021 -0700" }, "message": "Speculative fix for build failure.\n\nNot sure exactly what is causing the build server to fail (can\u0027t\nreproduce yet), but add some extra padding to a calloc and also\nsome test debugging printf()s.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "b56400f81ddd42e0e57372c957e668e6d5a72834", "tree": "982208eb0c9a22b013bcb702a8cfc22b26d2ab35", "parents": [ "552db8f4116df3fad4e4ebf90a9a05a77b9486fd" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Aug 27 10:20:21 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Aug 27 10:27:04 2021 -0700" }, "message": "Implement libcap:cap_proc_root() function.\n\nThis is needed to locally configure libcap to find the pid data\nif the proc filesystem is not mounted at \"/proc\" (rare). Currently\nlibcap only uses this info to implement cap_iab_get_pid().\n\nThis brings libcap back to parity with the Go \"cap\" package.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "552db8f4116df3fad4e4ebf90a9a05a77b9486fd", "tree": "43f61ba7cc65f1e4d7ce253b7cd071b84655436d", "parents": [ "386af0edbc9eec3b382451da782a08ba4632db06" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Aug 27 09:45:46 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Aug 27 10:26:59 2021 -0700" }, "message": "More fixes for static analysis issues.\n\nFurther observations from Zoltan Fridrich\u0027s static analysis of libcap.\nThis commit also includes a fix for something I broke with the last\nround of \"fixing\", and a test to make sure I don\u0027t make that mistake\nagain.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "386af0edbc9eec3b382451da782a08ba4632db06", "tree": "2c22b546005de9a14515a0b6478d9699ad8d49cc", "parents": [ "a56162c6900d203c5ac63a2b41b46cb0c45c645f" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Aug 26 22:26:56 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Aug 26 22:26:56 2021 -0700" }, "message": "Stop installing the cap and psx packages, but do install captree.\n\nWe also add the cap.ProcRoot() API to let the user redirect to their\nlocal /proc/ directory - in case anyone runs with an unusual setup\nlike that.\n\nI\u0027ve been studying the downstream package definitions and no one\nit doesn\u0027t seem popular to build the Go packages. Indeed, Go folk\nthemselves prefer to install via modules anyway, so we\u0027re getting\nwith the program.\n\nHowever, if folk want to build test the Go stuff as part of a package\nbuild and run an install as well, we reward them with the \u0027captree\u0027\nbinary.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "a56162c6900d203c5ac63a2b41b46cb0c45c645f", "tree": "344989f35e5fd42eda75a2e8f1feaffbae36eada", "parents": [ "c90b5debdf28acc010d5ee50ff5ff0c97ab0e367" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Aug 26 21:31:15 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Aug 26 21:45:27 2021 -0700" }, "message": "Eliminate an alignment issue found by clang.\n\nClang helpfully noticed that libcap allocated things should be 64-bit\naligned on 64-bit platforms. Restructure the memory allocation to ensure\nthis.\n\nFixes:\n\n https://bugzilla.kernel.org/show_bug.cgi?id\u003d214183\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "c90b5debdf28acc010d5ee50ff5ff0c97ab0e367", "tree": "997cab52eda411ad6d9785138c699feb259c3860", "parents": [ "07cdff9ac969c35f1b2e4c0ccb5e3cc5fdceb2b2" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Aug 26 20:24:47 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Aug 26 20:24:47 2021 -0700" }, "message": "Fix some static analysis results.\n\nThis series of issues was found by Zoltan Fridrich.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "07cdff9ac969c35f1b2e4c0ccb5e3cc5fdceb2b2", "tree": "f93abe633d0523278064b0c4f98b08ba784516c0", "parents": [ "a0aaea6e27df499c4d3c548af16e3727b99ca918" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Aug 25 21:09:19 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Aug 25 21:09:19 2021 -0700" }, "message": "Up the release version to 2.54\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "a0aaea6e27df499c4d3c548af16e3727b99ca918", "tree": "ed4caec6a8ceb8fed7d164f7c93f3f1a71705fd3", "parents": [ "935ab8f7cd332f958738c5c90d88dc2111187594" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Aug 25 19:50:46 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Aug 25 19:50:46 2021 -0700" }, "message": "Add a comment about overriding DYNAMIC.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "935ab8f7cd332f958738c5c90d88dc2111187594", "tree": "c9eee9b9e3539146ad4e11c568acd0e84324f250", "parents": [ "04f903f9155b23a6a9f0dd972b448ada5bfc5f82" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Aug 25 19:48:12 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Aug 25 19:48:12 2021 -0700" }, "message": "Support overriding choice of \u0027sudo\u0027.\n\nUse something like:\n\n make SUDO\u003dmy_sudo sudotest\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "04f903f9155b23a6a9f0dd972b448ada5bfc5f82", "tree": "619a3ff6a837ece8c1852a762cacf4e8b4b1f825", "parents": [ "7a75dbc2bb0cc46666572845704b1764ab38a4bc" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Aug 25 19:37:15 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Aug 25 19:38:13 2021 -0700" }, "message": "Add some more information to help, and contextual error messages.\n\nThis was inspired by a feature Debian has been patching orginally\ncredited to Zhi Li.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "7a75dbc2bb0cc46666572845704b1764ab38a4bc", "tree": "91dd252bc2223cb8e5d45f33d4477bd9e972cb8a", "parents": [ "6715a509015d2143dad0df92f2b12d3317b2cdcf" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Aug 25 19:11:22 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Aug 25 19:11:22 2021 -0700" }, "message": "Absorb some of archlinux\u0027s Make.Rule customizations.\n\nThese allow overriding of the sbin target directory with\n\n make sbindir\u003dxxx\n\nor\n\n make sbin\u003dxxx\n\nWe\u0027ve recently made some CPPFLAGS changes, so I\u0027m not going to\ndisturb those further this iteration.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "6715a509015d2143dad0df92f2b12d3317b2cdcf", "tree": "b6738c748c86c419b9dd7939993f6f97b793d82e", "parents": [ "be65c32dedbea96760fa7226881fed64f63d9a52" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Aug 25 18:48:01 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Aug 25 18:48:01 2021 -0700" }, "message": "Address a compiler warning with the tests/uns_test.\n\nWe\u0027re comfortable ignoring a write return code, but not all compilers\nare so display a comment when the write in the uns_test fails.\n\nThis addresses:\n\n https://bugzilla.kernel.org/show_bug.cgi?id\u003d214143\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "be65c32dedbea96760fa7226881fed64f63d9a52", "tree": "7f5fee487c9eb6d534069d2e83fc1f5fd6bcf06c", "parents": [ "5647374b3319796957edfb25400bf4164efca6c2" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Aug 23 20:09:53 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Aug 23 20:09:53 2021 -0700" }, "message": "Make \u0027progs/getpcaps --iab\u0027 act like \u0027go/captree\u0027 in output format\n\nThe combined options \u0027getpcaps --iab --verbose\u0027 will show everything\nin detail (even the boring stuff).\n\nAlso used this exercise to test the libcap changes for iab comparisons.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "5647374b3319796957edfb25400bf4164efca6c2", "tree": "90ffab67550a1ea028038ed562452093aafdc454", "parents": [ "2e28d3f3e8a1eab3cae561465a4e8076b984be2f" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Aug 23 19:47:38 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Aug 23 19:47:38 2021 -0700" }, "message": "Revert most of the LDFLAGS -\u003e LDSTATIC change.\n\nThe intention was to force --static linking in only one corner case,\nso be more explicit about that one, and revert the build behavior\nin the others.\n\nReason for doing this was feedback from Arnout Vandecappelle in:\n\n https://bugzilla.kernel.org/show_bug.cgi?id\u003d214023#c16\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "2e28d3f3e8a1eab3cae561465a4e8076b984be2f", "tree": "2c34777cd6865f069b986207f6ec313b3487a3ac", "parents": [ "afbc554d16a32ed352191e49b3673f2f72d0002f" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Aug 23 19:17:42 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Aug 23 19:17:42 2021 -0700" }, "message": "Allow the builder to force -lpam linkage.\n\nI\u0027ve yet to understand why this is needed. But, apparently, folk\nfeel strongly that there is a reason one might want to force it\none way or another. If you don\u0027t care one way or the other, let\nthe Makefiles figure out something that works.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "afbc554d16a32ed352191e49b3673f2f72d0002f", "tree": "1a360319185cfde06ca4964ff7984c62dbeb25cf", "parents": [ "4f45bcc83545efdb4ffc5b9c05e1dbabe196339d" ], "author": { "name": "Arnout Vandecappelle (Essensium/Mind)", "email": "arnout@mind.be", "time": "Tue Aug 24 01:22:57 2021 +0200" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Aug 23 18:20:36 2021 -0700" }, "message": "libcap/Makefile: don\u0027t overwrite \u0027empty\u0027 when generating loader.txt\n\nobjcopy takes an input file and an output file as arguments. If the\noutput file is left out, the input file will be overwritten.\n\nSince the objcopy command used to generate loader.txt only does a\ndump-section and no filtering, in practice there is no change to empty.\nHowever, as a side-effect, its timestamp is updated. The timestamp of\nempty and of loader.txt will be more or less the same; however,\nloader.txt is closed just before the output file is closed, so it\u0027s\npossible that the timestamp of loader.txt is just a little bit earlier.\nIf this happens, it causes loader.txt to be rebuilt later, which in turn\ncauses a number of other object files to be rebuilt.\n\nUsually that\u0027s harmless, but it sometimes causes the rebuild to happen\nduring \u0027make install\u0027. This is particularly annoying if \u0027make install\u0027\nis done as root, since loader.txt becomes owned by root in that case.\n\nFix this by specifying a harmless output file: /dev/null.\n\nFixes: ee3b25c0a877fa74d1aec88f325ac45b09963c82\n\nSigned-off-by: Arnout Vandecappelle (Essensium/Mind) \u003carnout@mind.be\u003e\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "4f45bcc83545efdb4ffc5b9c05e1dbabe196339d", "tree": "b72863f7b40f62a16b9c1446a4bf33d6e1e2f9a9", "parents": [ "596850bf55899c0217aa53fcff99491fbecdc2b2" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 22 20:58:04 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 22 21:13:56 2021 -0700" }, "message": "Add cap_iab_{compare,get_pid} functions to libcap; --iab to getpcaps.\n\nThis brings libcap back to parity with the Go \u0027cap\u0027 package. We\nprovide a CAP_IAB_DIFFERS(result, vector) macro to evaluate the result\nof cap_iab_compare().\n\nExtend the getpcaps arguments to include --iab. This causes the utility\nto explore the IAB tuple for the specified process. When used, this\noutputs a text representation in a similar format to that of the\n\u0027captree\u0027 (Go) utility.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "596850bf55899c0217aa53fcff99491fbecdc2b2", "tree": "e571da3887b764090c79347884a08f2ff49b0d1d", "parents": [ "ac297b51c6730c22a06b759bd4235b47c52053bc" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 22 15:47:16 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 22 15:55:24 2021 -0700" }, "message": "Add the captree example.\n\nThis is a small command line utility for doing something like pstree\nbut focused on revealing the full capability state of the processes\nand threads shown.\n\nThis requires support provided in the cap.IABGetPID() function which\nwill debut in libcap-2.54. For now, the binary is only buildable from\nHEAD in the git repository.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "ac297b51c6730c22a06b759bd4235b47c52053bc", "tree": "1b2bf1952f6ccf5f1b329fcf8b55dc08f9cfaa05", "parents": [ "25cdfaf7f813a94612279712a2d6d1e1bb39e08b" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 22 14:32:12 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 22 14:32:12 2021 -0700" }, "message": "Revamp the comparison API of *Set and *IAB tuples; add IABGetPID().\n\nOlder APIs remain but are documented as deprecated. If we ever need\nto release a golang version \"2\" version of the library, I\u0027ll drop\nsupport for deprecated functions, but I have no intention of needing\nto do that. In the mean time, the deprecated functions are wrappers\naround the new functions.\n\nNew API: *Set and *IAB have .Cf() functions now. That return a\n[IAB]Diff value. This value, if 0, means the compared pointers\nmatch one another. Non-zero values can be interogated with the\n([IAB]Diff).Has() functions.\n\nAlso, add an IABGetPID() function. Since the kernel provides no\nsyscall support for this, we have to resort to parsing the /proc/\nfiles. Implemented mostly for parity with the syscall backed\nGetPID() *Set returning API.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "25cdfaf7f813a94612279712a2d6d1e1bb39e08b", "tree": "52e370533ad000416b6853a4e39d8985344918a9", "parents": [ "f81144578ff24a70356faafb82e55de8f3e1292f" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 22 14:25:11 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 22 14:25:11 2021 -0700" }, "message": "Fix error code handling for failed cap_reset_ambient()\n\nLooks like the system call wrapper wasn\u0027t migrated properly when\nI added support to get fakeroot (\n\n https://bugzilla.kernel.org/show_bug.cgi?id\u003d206539\n\n) working again. That is, all builds in the inclusive range\nlibcap-[2.28, 2.53] have this issue.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "f81144578ff24a70356faafb82e55de8f3e1292f", "tree": "2f96cb311fe2116b902d23913287f1fe328c0124", "parents": [ "86c85c07c83f7ddc722b872ea0ff9e9b0f70bbc8" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Aug 21 10:29:16 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Aug 21 10:29:16 2021 -0700" }, "message": "Handle libcap allocation failures more explicitly and fix a memory leak.\n\nThis started out as a refactoring of a patch provided by Samanta Navarro.\nReworked, I noticed a latent memory leak in cap_iab_get_proc(), so I\u0027ve\nfixed that too.\n\nAlso, migrated a compile failure check to a more useful cap_test for a\nhighly unlikely corner case (future proofing). While there, noticed\nand fixed the binary search test and code (not sure what it was testing\nbefore).\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "86c85c07c83f7ddc722b872ea0ff9e9b0f70bbc8", "tree": "3814a9f1c2b4abc8a38555cc3a382793701792a2", "parents": [ "34186d026bad09e8e2bd9839bce138616c5d2557" ], "author": { "name": "Samanta Navarro", "email": "ferivoz@riseup.net", "time": "Sat Aug 21 12:11:45 2021 +0000" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Aug 21 08:34:51 2021 -0700" }, "message": "Check return values of allocating functions\n\nThe calloc and asprintf functions can return NULL if not enough memory\nis available. The majority of the code base checks for this condition\nalready.\n\nSigned-off-by: Samanta Navarro \u003cferivoz@riseup.net\u003e\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "34186d026bad09e8e2bd9839bce138616c5d2557", "tree": "b4f1e2df0a3eb4e90fcb2916691268252fe41eae", "parents": [ "d21a561ddb80cdc039f32eb5225f5d398d221291" ], "author": { "name": "Samanta Navarro", "email": "ferivoz@riseup.net", "time": "Sat Aug 21 12:11:00 2021 +0000" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Aug 21 08:29:40 2021 -0700" }, "message": "Fix endless loop with very long strings\n\nIf a string with more than UINT_MAX characters is passed into\ncap_from_text, then an endless loop occurs in lookupname.\n\nThis is clearly an edge case but the fix is very simple as well:\nUse size_t instead of unsigned.\n\nSigned-off-by: Samanta Navarro \u003cferivoz@riseup.net\u003e\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "d21a561ddb80cdc039f32eb5225f5d398d221291", "tree": "6c8cb9576031ea2c83ec6b374968fbf242f0080d", "parents": [ "25b8964e178b4c134a94b3a1b92f73111736c358" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Aug 19 20:49:39 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Aug 19 20:49:39 2021 -0700" }, "message": "Drop non-standard IPATH in favor of CPPFLAGS.\n\nThis also required locally augmenting CFLAGS with -fPIC in the\nMakefile\u0027s that required it.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "25b8964e178b4c134a94b3a1b92f73111736c358", "tree": "fc574ae11f2e6c371d8feb6f698034da745a63db", "parents": [ "797050ca7f9e85eec91000c71d58359f427d1b14" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Aug 19 20:00:23 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Aug 19 20:00:23 2021 -0700" }, "message": "Make lib*.so files executable.\n\nSince 2.52 these libraries have supported being run as binaries\nso install them as such.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "797050ca7f9e85eec91000c71d58359f427d1b14", "tree": "94811f3309109f6c264dbfaf3f7538241908bf5c", "parents": [ "e721aff543186ca4463954f8bca150b97736a01a" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 15 19:06:35 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 15 19:06:35 2021 -0700" }, "message": "Up the release version to 2.53\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "e721aff543186ca4463954f8bca150b97736a01a", "tree": "3454076d8639b129e79db2b5c6411940e1b1a8af", "parents": [ "686084897c15348f42bde8e4d3448edfc78ece79" ], "author": { "name": "Samanta Navarro", "email": "ferivoz@riseup.net", "time": "Sat Aug 14 12:08:22 2021 +0000" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Aug 14 11:03:27 2021 -0700" }, "message": "Fix typos.\n\nTypos found with codespell\n\nSigned-off-by: Samanta Navarro \u003cferivoz@riseup.net\u003e\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "686084897c15348f42bde8e4d3448edfc78ece79", "tree": "78f27214e5e326f4ada08763703087c5d22e435a", "parents": [ "fd32fac5e3f13fe1b0b2a1cc22d8dfb5e608f2d7" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Aug 14 10:28:14 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Aug 14 10:28:14 2021 -0700" }, "message": "Complete cap_launch fix.\n\nSamanta Navarro included this in their suggested fix, but I missed\nincluding it in the previous commit. Fixed now.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "fd32fac5e3f13fe1b0b2a1cc22d8dfb5e608f2d7", "tree": "613933322df4881b9a67265c75203c739d602526", "parents": [ "d5daba542ae15cf47752ab5430ded4cd0d0a7ce3" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Aug 14 10:02:23 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sat Aug 14 10:02:23 2021 -0700" }, "message": "Fix cap_launch failures - error propogation.\n\nAll credit for this fix goes to Samanta Navarro. The launch error\npropagation code was evidently broken previously.\n\nSamanta also provided a proof of concept test case and we\u0027ve\nincluded that in the tests/libcap_launch_test.c.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "d5daba542ae15cf47752ab5430ded4cd0d0a7ce3", "tree": "0b35d806c41f24ad9d58962ae4c4bbba10d50b04", "parents": [ "6dea1813f269f9c03cea226fffdd75670c70ea01" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Aug 13 18:25:52 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Aug 13 20:43:14 2021 -0700" }, "message": "Support distributions that build libcap with aggressive link options.\n\nDiscussion of one such setup in this bug (reported by David Runge):\n\n https://bugzilla.kernel.org/show_bug.cgi?id\u003d214023\n\nWork around the failure to run ./pam_cap.so in these cases with\nsome more Makefile magic, and adjust test building with these\nflags so it works in DYNAMIC\u003dyes|no and SHARED\u003dyes|no cases.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "6dea1813f269f9c03cea226fffdd75670c70ea01", "tree": "530f88b52c38502e4155000a3e66ca4d566462b7", "parents": [ "4db87d88aec313b6fda78b48b3f28fdc6c751180" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Aug 11 19:54:29 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Aug 11 19:59:24 2021 -0700" }, "message": "Support CC\u003dclang again.\n\nI didn\u0027t realize CC\u003dclang used to work. Now it does again.\nI\u0027ve also added a test build for clang in distcheck.\n\nThis fixes:\n\n https://bugzilla.kernel.org/show_bug.cgi?id\u003d214047\n\nAlso, add a note about pam_cap.so building after debugging:\n\n https://bugzilla.kernel.org/show_bug.cgi?id\u003d214023\n\nFinally, removed a redundant LDFLAGS link directory override.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "4db87d88aec313b6fda78b48b3f28fdc6c751180", "tree": "27681a17489b70351a98b4a8f6b27c8afaef1aff", "parents": [ "b56ffb05b423ad9d28b16c2662f41584f1fac2ff" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Aug 10 18:23:22 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Aug 10 18:23:22 2021 -0700" }, "message": "Noticed that this pam_cap/Makefile comment had unintentionally migrated\n\nMove it to where it makes sense.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "b56ffb05b423ad9d28b16c2662f41584f1fac2ff", "tree": "542e7b0ad68f783298745488657cb6a2446b906c", "parents": [ "8070dfec397c5baf83dc5e9a342eb0248c8e7947" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Aug 03 18:45:17 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Aug 03 18:45:17 2021 -0700" }, "message": "Add some documentation concerning the cap.FuncLauncher() behavior.\n\nSlavi Marinov was asking about how a single webserver might use the\ncap package to serve different content as a different user? So I\nrealized this detail wasn\u0027t obvious from the package documentation.\n\nI also put together this example sketch:\n\n https://play.golang.org/p/6Hr0XW3JP6a\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "8070dfec397c5baf83dc5e9a342eb0248c8e7947", "tree": "fe4b516f883e1e87fe5a97c4d49b522634f3f583", "parents": [ "919d1fefc29626cfabadea976b8518175a88684f" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 01 17:49:56 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 01 17:49:56 2021 -0700" }, "message": "Up the release version to 2.52\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "919d1fefc29626cfabadea976b8518175a88684f", "tree": "70941c49b3dada07b064d7aaf3c71e41dd70f695", "parents": [ "ef911c679721a2fd335bb9e66057ffd4ebcf240d" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 01 17:15:32 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 01 17:15:32 2021 -0700" }, "message": "Revive an ancient \u0027su\u0027 implementation to explore use with libcap.\n\nThat is, this \u0027su\u0027 is not to be installed setuid-root. It is intended\nto be installed `setcap \u003dp su`.\n\nWith latest PAM sources (ie., newer than Linux-PAM 1.5.1 [*]) and\nlibcap this is able to validate that ambient capabilities can be applied\nby pam_cap.so. For discussion, see this bug:\n\n https://bugzilla.kernel.org/show_bug.cgi?id\u003d212945\n\nCaution. I\u0027ve done very little auditing of this binary. So, I expect\n(and will be happy if folk find them) to hear about bugs etc. What makes\nme excited is to explore the ways in which classic \"setuid-root\" exploit\nvectors exhibit with bugs in this code...\n\n[*] At the time of writing Linux-PAM 1.5.1 is the latest release and that\nwas before the needed pam_unix.so support was committed. See\n\n https://github.com/linux-pam/linux-pam/issues/317#issuecomment-869064103\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "ef911c679721a2fd335bb9e66057ffd4ebcf240d", "tree": "0b4b634d0932ba4dcc8c0d6ccf034c2dd4eb8e79", "parents": [ "e1af96aa58dde0ab8ba873293e7cc3cb5ae0b5a8" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed May 05 21:38:14 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 01 17:00:14 2021 -0700" }, "message": "Import an old version of su from SimplePAMApps-0.60\n\nWhen Linux-PAM was getting its act together (more than two decades ago)\nwe cobbled together a set of system apps and made them use Linux-PAM\nfor authentication. Once Redhat shipped Linux-PAM, the mainstream\nversions of these apps adopted Linux-PAM and these simple ones withered.\nI want to explore some pam_cap.so related issues and so I\u0027ve resurrected\none of them, su, which announces itself to libpam with the name \"sucap\".\n\nI\u0027m not sure where I\u0027ll go with this yet, but my first goal is to\nreproduce the issue:\n\n https://bugzilla.kernel.org/show_bug.cgi?id\u003d212945\n\nand validate the workaround I\u0027ve added to that module is sufficient.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "e1af96aa58dde0ab8ba873293e7cc3cb5ae0b5a8", "tree": "7e18e39606884723a9e26c3eb0e09b0b59cbd7c0", "parents": [ "a28eac8c1ccee337676a01e0024882f6bfd30ba9" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 01 16:59:33 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Aug 01 16:59:33 2021 -0700" }, "message": "Add a note about cap_launch callback function return values.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "a28eac8c1ccee337676a01e0024882f6bfd30ba9", "tree": "f04de58368628fc8e8c7bf243d27ed874b0d9616", "parents": [ "3421fa5f5b5ecb6c8136c553cfa10c8ed6803610" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Jul 15 19:41:36 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Thu Jul 15 19:41:36 2021 -0700" }, "message": "Clean up allocated memory.\n\nDeliberately free memory when appropriate as a normal part of\nexecuting a .so object.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "3421fa5f5b5ecb6c8136c553cfa10c8ed6803610", "tree": "0d3a4bccc0d977147c8b97d53fdff1a9a2539fa1", "parents": [ "fdd53759d859dd44dccff846b9f1d137dcc25cd3" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Jul 14 19:36:18 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Wed Jul 14 19:36:18 2021 -0700" }, "message": "realloc less at startup executing a .so file\n\nA small perf optimization for the common case. Mostly, this change\nis to fix a comment.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "fdd53759d859dd44dccff846b9f1d137dcc25cd3", "tree": "c54c4be0c14ca4ddb54200b44e60092d5f95d40b", "parents": [ "c523294a0c4ee3193bbb490c858ece396e627e86" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Jul 13 19:32:45 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Jul 13 19:32:45 2021 -0700" }, "message": "Allow for systems with no /proc/self/cmdline file.\n\nIf /proc/ isn\u0027t mounted, the command line won\u0027t be available there.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "c523294a0c4ee3193bbb490c858ece396e627e86", "tree": "683874e7ec62444fb3d61511887872f4fa96f20b", "parents": [ "efd293947f940180eedd8d0915b124f4aedccc08" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Jul 12 21:10:07 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Jul 12 21:23:47 2021 -0700" }, "message": "Clarify some cap_launch documentation.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "efd293947f940180eedd8d0915b124f4aedccc08", "tree": "c789d728556e907d39ece8f9cd5b9cf00cf96fa1", "parents": [ "ee3b25c0a877fa74d1aec88f325ac45b09963c82" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Jul 12 21:09:10 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Jul 12 21:23:47 2021 -0700" }, "message": "Support running pam_cap.so as a simple binary.\n\nThis prints module information and supports the sole optional\nargument --help.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "ee3b25c0a877fa74d1aec88f325ac45b09963c82", "tree": "67bf3458179a9e80a8055232f6891c989588531f", "parents": [ "f73a3691afe24fec86841eca43f5edcfbde875f3" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Jul 12 16:32:56 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Jul 12 21:23:32 2021 -0700" }, "message": "Support simply executing the built shared libraries.\n\nSome system libraries support being run as regular executables.\nNow that I have figured out how to do it, add support for libcap.so\nand libpsx.so to print some information and exit.\n\nNote, I\u0027ve explained how most of this stuff works in this answer:\n\n https://stackoverflow.com/a/68339111/14760867\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "f73a3691afe24fec86841eca43f5edcfbde875f3", "tree": "729318580054940cc186f9170025801ba37e3319", "parents": [ "69f7ddbb126f7efa1342b25030e8ca48ee5560ba" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Jul 02 21:17:27 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Jul 02 21:17:27 2021 -0700" }, "message": "When --suggest\u0027ing also compare against capability names\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "69f7ddbb126f7efa1342b25030e8ca48ee5560ba", "tree": "984a408f0c6c00ccef544c5cf2e7d344e9318a6e", "parents": [ "6926f78d99fc0e5ed5b10a06ffde79539b70df6a" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Jul 02 19:51:51 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Fri Jul 02 19:51:51 2021 -0700" }, "message": "Provide a \u0027--current\u0027 command line argument for capsh.\n\nThis is equivalent to \u0027capsh --print|fgrep Current\u0027. I\u0027ve been using\nthat combination a lot in the write-ups on the libcap website\n(https://sites.google.com/site/fullycapable/) and so it struck me\nthat capsh probably should support it natively.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "6926f78d99fc0e5ed5b10a06ffde79539b70df6a", "tree": "a76b0dc82fe81eac54cb652f43c4090b54c16265", "parents": [ "8c6c3628061dadc58bc6a3ec66b627f8412797ce" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Jun 28 22:03:08 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Jun 28 22:13:56 2021 -0700" }, "message": "Add pam_cap.so \"default\u003d\u003cIAB\u003e\" module argument support\n\nAdd a new optional argument to pam_cap.so. This argument substitutes\nfor a line like this in the capability.conf file:\n\n \u003cIAB\u003e *\n\nThat is, it supplies the default \u003cIAB\u003e 3-tuple of capability vectors.\nAny * value in the prevailing capability.conf file overrides this default.\nHowever, the admin can supply arguments like this:\n\n auth pam_cap.so autoauth config\u003d/dev/null default\u003d^cap_wake_alarm\n\nto grant everyone who executes it the ambient capability cap_wake_alarm.\n\nThis addresses:\n\n https://bugzilla.kernel.org/show_bug.cgi?id\u003d213611\n\nHowever, see:\n\n https://bugzilla.kernel.org/show_bug.cgi?id\u003d212945\n\nfor issues limiting PAM application support for ambient capabilities in\ngeneral at present.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "8c6c3628061dadc58bc6a3ec66b627f8412797ce", "tree": "992d48691a2577f6a4ce2d6d4566f47f4773037d", "parents": [ "5fabea8cc501b548df400d3d694ce71870237c07" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Jun 22 20:08:35 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Tue Jun 22 20:08:35 2021 -0700" }, "message": "Minor edits of README.\n\nMostly be clear that the upstream git repository is in the libs\nsubdirectory tree on kernel.org. (I keep coming across folk referring\nto the the morgan one and I mostly forget to update that one these\ndays.)\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "5fabea8cc501b548df400d3d694ce71870237c07", "tree": "e8500e484c7f82e92c924adfb27b2d696675ab2d", "parents": [ "06ec53d0c9fcddcc071a0e07731e6c83238400e6" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Jun 21 20:49:35 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Jun 21 20:49:35 2021 -0700" }, "message": "Update comment in gowns sources.\n\nI still have some things I want to explore with this example, so I\ndon\u0027t want to give the impression this is a stable example.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "06ec53d0c9fcddcc071a0e07731e6c83238400e6", "tree": "3b72224cb78968adfbb15ab98a62b0960571e60c", "parents": [ "3857d17677ab60c35d12c003eee219c6f51da566" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Jun 21 17:46:43 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Mon Jun 21 17:46:43 2021 -0700" }, "message": "Permit compilation with -std\u003dc89.\n\nTested with\n\n make COPTS\u003d\"-O2 -std\u003dc89\" clean all test sudotest\n\nThis addresses the issue reported by Byron Stanoszek:\n\n https://bugzilla.kernel.org/show_bug.cgi?id\u003d213541\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "3857d17677ab60c35d12c003eee219c6f51da566", "tree": "523e41e441f84add2be3de4a97ac8da1325db2db", "parents": [ "30698d84b585f629e7a6a7d882c5b87320224f23" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Jun 20 16:57:57 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Jun 20 16:57:57 2021 -0700" }, "message": "Up the release version to 2.51\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "30698d84b585f629e7a6a7d882c5b87320224f23", "tree": "5b97743cf6cc6780c09944d94135e8f392fd7218", "parents": [ "1b59ff98484b5dd18bd1a0f99a002d67b6d773cd" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Jun 20 16:52:19 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Jun 20 16:52:19 2021 -0700" }, "message": "No longer need the go/pkg directory.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "1b59ff98484b5dd18bd1a0f99a002d67b6d773cd", "tree": "b5e2d5ef3293802ed5852565c1be6b1129ee13d7", "parents": [ "2efece0bb49860456ca9357c1e1087bf6f788857" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Jun 20 15:40:15 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Jun 20 15:40:15 2021 -0700" }, "message": "Do away with GOPATH based GO building.\n\nFrom here on out, we use go ... -mod\u003dvendor to build/test/run in\ntree. This blog post suggets that GOPATH building is on the way\nout:\n\n https://blog.golang.org/go116-module-changes\n\nThis addresses this feature request:\n\n https://bugzilla.kernel.org/show_bug.cgi?id\u003d212453\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" }, { "commit": "2efece0bb49860456ca9357c1e1087bf6f788857", "tree": "509c53b02c5c67635414c0aebe4a9ebb0d13fd73", "parents": [ "2c99ecd7ee8580cced618dd9d16473f15e778e5e" ], "author": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Jun 20 13:19:40 2021 -0700" }, "committer": { "name": "Andrew G. Morgan", "email": "morgan@kernel.org", "time": "Sun Jun 20 13:19:40 2021 -0700" }, "message": "Clean up some compilation warnings\n\nAlso amend .gitignore to ignore uns_test binary in the progs directory.\n\nSigned-off-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\n" } ], "next": "2c99ecd7ee8580cced618dd9d16473f15e778e5e" }