1. 03 May, 2018 2 commits
  2. 16 Apr, 2018 4 commits
  3. 12 Apr, 2018 2 commits
    • Luca Boccassi's avatar
      Add capabilities to /bin/ip on postinst to fix ip vrf exec · 48fc47a8
      Luca Boccassi authored
      /bin/ip can now drop capabilities when launched, except when running
      ip vrf exec.
      ip vrf exec requires cap_dac_override to create a cgroup subdir in
      /sys, cap_sys_admin to load a BPF program to change the VRF of the
      socket being used to jail the application and cap_net_admin to change
      the cgroup of the process.
      Without these, it's impossible to run a simple command like ping into
      a vrf.
      
      Add the required capabilities via a postinst file to fix it. Make it
      disabled by default behind a new low-priority debconf knob.
      Add NEWS file to inform users of the debconf option.
      48fc47a8
    • Luca Boccassi's avatar
      Update changelog for 4.16.0-1 release · e4324552
      Luca Boccassi authored
      e4324552
  4. 03 Apr, 2018 4 commits
  5. 02 Apr, 2018 3 commits
  6. 29 Mar, 2018 10 commits
  7. 28 Mar, 2018 5 commits
  8. 27 Mar, 2018 10 commits