10.8.5 2- Remove python global exception handler since it's deprecated 3- Make the utilities link against just built libraries 4- Remove unused macro in cap-ng.h 5 60.8.4 7- In capng_change_id, clear PR_SET_KEEPCAPS if returning an error 8- pscap: add -p option for reporting a specified process (Masatake Yamato) 9- Annotate function prototypes to warn if results are unused 10- Drop python2 support 11 120.8.3 13- Fix parameters to capng_updatev python bindings to be signed 14- Detect capability options at runtime to make containerization easier (ntkme) 15- Initialize the library when linked statically 16- Add gcc function attributes for deallocation 17 180.8.2 19- In capng_apply, if we blew up in bounding set, allow setting capabilities 20- If PR_CAP_AMBIENT is not available, do not build libdrop_ambient 21- Improve last_cap check 22 230.8.1 24- If procfs is not available, leave last_cap as CAP_LAST_CAP 25- If bounding and ambient not found in status, try prctl method 26- In capng_apply, move ambient caps to the end of the transaction 27- In capng_apply, return errors more aggressively. 28- In capng_apply, if the action includes the bounding set,resync with the kernel 29- Fix signed/unsigned warning in cap-ng.c 30- In capng_apply, return a unique error code to diagnose any failure 31- In capng_have_capability, return 0 for failure 32- Add the libdrop_ambient admin tool 33 340.8 35- Add vararg support to python bindings for capng_updatev 36- Add support for ambient capabilities 37- Add support for V3 filesystem capabilities 38 390.7.11 40- Really clear bounding set if asked in capng_change_id 41- Add CAP_PERFMON, CAP_BPF, & CAP_CHECKPOINT_RESTORE 42- Avoid malloc/free in capng_apply (Natanael Copa) 43- If procfs is not available, get bounding set via prctl 44- Cleanup some compiler warnings 45 460.7.10 47- Update capng_change_id man page 48- Add capng_have_permitted_capabilities function 49- Update filecap to output which set the capabilities are in 50- Fix filecap to not output an error when a file has no capabilities 51- Add udplite support to netcap 52- Fix usage of pthread_atfork (Joe Orton) 53- Mark processes in child user namespaces with * (Danila Kiver) 54 550.7.9 56- Fix byte compiling python3 bindings 57- Detect and output a couple errors in filecap 58- Use pthread_atfork to optionally reset the pid and related info on fork 59- Rework spec file to show new python2/3 separation 60 610.7.8 62- Improve Python3 support 63- Fix the thread separation test 64- Correct typo in cap_pacct text 65- Update man page for captest 66- Fix sscanf string lengths in netcap 67- Correct linking of python3 module 68 690.7.7 70- Make sure all types used in _lnode are defined in proc-llist.h 71- Fix python binding test for old kernels 72- Fix leaked FD in library init 73 740.7.6 75- Fix python3 support 76 770.7.5 78- Make python3 supported 79- In python bindings test, clamp CAP_LAST_CAP with /proc/.../cap_last_cap 80- Update table for 3.16 kernel 81 820.7.4 83- In pscap, remove unused code 84- Add CAPNG_INIT_SUPP_GRP to capng_change_id 85- Drop CAP_COMPROMISE_KERNEL 86- Update the autotools components 87- Dynamically detect last capability (#895105) 88- Add PR_SET_NO_NEW_PRIVS to capng_lock if kernel supports it 89 900.7.3 91- Make sure stderr is used consistently in utils 92- Fix logic causing file based capabilities to not be supported when it should 93 940.7.1 95- Add CAP_COMPROMISE_KERNEL 96- Define FTW_CONTINUE in case its not defined in libc 97- Use glibc for xattr.h if available 98 990.7 100- Make file opens use the cloexec flag (Cristian Rodríguez) 101- Add CAP_BLOCK_SUSPEND 102- Fix possible segfaults when CAP_LAST_CAP is larger than the lookup table 103- In pscap, don't drop capabilities when running with capabilities 104 1050.6.6 106- In netcap, make sure readlink is handled properly 107- Add CAP_SYSLOG 108- In netcap and pscap, ensure euid is initialized 109- Add CAP_WAKE_ALARM 110 1110.6.5 112- Fix self test build problem on clean system (Sterling X. Winter) 113- Only open regular files in filecap 114- Make building Python bindings optional 115- Python bindings update (arfrever.fta) 116- Fix filecap segfault when checking a specific file 117- Add define for missing XATTR_NAME_CAPS since 2.6.36 makes it private 118 1190.6.4 120- Update packet socket code to print interface 121- Fix effective capabilities read from file descriptor 122- Use thread ID for capget/set calls 123 1240.6.3 125- In netcap and pscap use the effective uid 126- In capng_change_id, only retain setpcap if clearing the bounding set 127 1280.6.2 129- Make pscap drop capabilities so its not listed in report 130- Review prctl calls to make sure we are passing 5 args 131- Add package config support 132 1330.6.1 134- In netcap, don't complain about missing udp or raw network files 135- Adjusted data read in for file based capabilities 136 1370.6 138- In netcap, don't complain about missing network files 139- Add python bindings 140- Add m4 macro file to help developers configure libcap-ng in their apps 141- Fake applying bounding set for old OS 142- Ignore setpcap for old OS when changing id 143- Remove capabilities v1 data handling from reading file attributes 144- Set the SECURE_NO_SETUID_FIXUP and LOCKED securebits flags in capng_lock 145 1460.5.1 147- Remove unnecessary uid check in change_uid when dropping supplemental groups 148- Add credential printout and other improvements to captest 149- In the init routine, set hdr.pid to current process 150- Use bit mask on effective capabilities check in have_capabilities 151- Numeric printing of bounding set bits were in wrong order 152- In update function, reverse the order of bounding set vs capabilities 153- Revise the tests used to determine if bounding set should be updated 154 1550.5 156- If attr/xattr.h is not available disable file system capabilities 157- Initialize capng_have_capability with capng_get_caps_process if unknown 158- Make capng_change_id drop the gid if given 159- Fixed cap_update for bounding set 160- Fix have_capability for bounding set 161- Added more tests to the make check target 162- Remove CAPNG_LOCK_PERMS for change_id flags 163- Added captest program 164 1650.4.2 166- Fix missing includes for various OS and platforms 167- Correct misplaced #ifdef for older OS 168- Reorder clearing of bounding set in capng_change_id 169- Make locking a noop in capng_change_id for the moment 170 1710.4.1 172- spec file clean ups 173- Man pages for all library functions 174 1750.4 176- Initial public release 177