capability v0.4.0
Added
- New separate API for ambient (GetAmbient, SetAmbient, ResetAmbient)
and bound (GetBound, DropBound) capabilities, modelled after libcap. (#176)
Fixed
- Apply now returns an error if called for non-zero
pid
. Before this change,
it could silently change some capabilities of the current process, instead of
the one identified by thepid
. (#168, #174) - Fixed tests that change capabilities to be run in a separate process. (#173)
- Other improvements in tests. (#169, #170)
Changed
- Use raw syscalls (which are slightly faster). (#176)
- Most tests are now limited to testing the public API of the package. (#162)
- Simplify parsing /proc/pid/status, add a test case. (#162)
- Optimize the number of syscall to set ambient capabilities in Apply
by clearing them first; add a test case. (#163, #164) - Better documentation for Apply, NewFile, NewFile2, NewPid, NewPid2. (#175)
Removed
.golangci.yml
and.codespellrc
are no longer part of the package. (#158)
For the complete list of changes, see capability/CHANGELOG.md.
Thanks to all of the contributors who made this release possible:
- Kir Kolyshkin (@kolyshkin)
- lifubang (@lifubang)
- Sebastiaan van Stijn (@thaJeztah)
- Tianon Gravi (@tianon)