Skip to content


Choose a tag to compare
@stevegrubb stevegrubb released this 09 Dec 18:55
· 69 commits to master since this release

In capng_apply, continue changing capabilities when faced with an error in the bounding set to cover the possibility that someone does not check the return codes and doesn't realize they have full capabilities when they should have been dropped. This release also improves the runtime detection of the last valid capability. And if PR_CAP_AMBIENT is not available, do not build libdrop_ambient.