{"push_id":931739963,"size":7,"distinct_size":7,"ref":"refs/heads/master","head":"1f52a79d4eb0216bf1f2d96539609f02d8bb9e71","before":"f466acdc633fc496961eff0c7f66501f4588e5b6","commits":[{"sha":"13f5402c6b734ed4c2b3e8b7c3d3bf6d815e7661","author":{"email":"f6f103a8fc63bb0d0685a812297dba62dfe42816@fb.com","name":"Aleksander Adamowski"},"message":"Fix miscalculated buffer size and uses of size-unlimited sprintf()\nfunction.\n\nNot sure if this results in an exploitable buffer overflow, probably not\nsince the the int value is likely sanitized somewhere earlier and it's\nbeing put through a bit mask shortly before being used.","distinct":true,"url":"https://api.github.com/repos/eworm-de/systemd/commits/13f5402c6b734ed4c2b3e8b7c3d3bf6d815e7661"},{"sha":"a103496ca585e22bb5e386e3238b468d133f5659","author":{"email":"75dda586a9213f0e0695eb79120c94222bb30e60@intel.com","name":"Ismo Puustinen"},"message":"capabilities: keep bounding set in non-inverted format.\n\nChange the capability bounding set parser and logic so that the bounding\nset is kept as a positive set internally. This means that the set\nreflects those capabilities that we want to keep instead of drop.","distinct":true,"url":"https://api.github.com/repos/eworm-de/systemd/commits/a103496ca585e22bb5e386e3238b468d133f5659"},{"sha":"755d4b67a471ed1a3472b8536cb51315d4e4e3c1","author":{"email":"75dda586a9213f0e0695eb79120c94222bb30e60@intel.com","name":"Ismo Puustinen"},"message":"capabilities: added support for ambient capabilities.\n\nThis patch adds support for ambient capabilities in service files. The\nidea with ambient capabilities is that the execed processes can run with\nnon-root user and get some inherited capabilities, without having any\nneed to add the capabilities to the executable file.\n\nYou need at least Linux 4.3 to use ambient capabilities. SecureBit\nkeep-caps is automatically added when you use ambient capabilities and\nwish to change the user.\n\nAn example system service file might look like this:\n\n[Unit]\nDescription=Service for testing caps\n\n[Service]\nExecStart=/usr/bin/sleep 10000\nUser=nobody\nAmbientCapabilities=CAP_NET_ADMIN CAP_NET_RAW\n\nAfter starting the service it has these capabilities:\n\nCapInh: 0000000000003000\nCapPrm: 0000000000003000\nCapEff: 0000000000003000\nCapBnd: 0000003fffffffff\nCapAmb: 0000000000003000","distinct":true,"url":"https://api.github.com/repos/eworm-de/systemd/commits/755d4b67a471ed1a3472b8536cb51315d4e4e3c1"},{"sha":"70d7aea5c7270764ee71d6828e76402001afed13","author":{"email":"75dda586a9213f0e0695eb79120c94222bb30e60@intel.com","name":"Ismo Puustinen"},"message":"tests: test ambient capabilities.\n\nThe ambient capability tests are only run if the kernel has support for\nambient capabilities.","distinct":true,"url":"https://api.github.com/repos/eworm-de/systemd/commits/70d7aea5c7270764ee71d6828e76402001afed13"},{"sha":"ece87975a97509b48a01b1e3da2e99c1c7dfd77a","author":{"email":"75dda586a9213f0e0695eb79120c94222bb30e60@intel.com","name":"Ismo Puustinen"},"message":"man: add AmbientCapabilities entry.","distinct":true,"url":"https://api.github.com/repos/eworm-de/systemd/commits/ece87975a97509b48a01b1e3da2e99c1c7dfd77a"},{"sha":"4a6a24be180337f405591c7fa4fa112a765c53bb","author":{"email":"64b2b6d12bfe4baae7dad3d018f8cbf6b0e7a044@zonque.org","name":"Daniel Mack"},"message":"Merge pull request #2303 from aadamowski/fix-miscalculated-buffer\n\nFix miscalculated buffer size and uses of size-unlimited sprintf()","distinct":true,"url":"https://api.github.com/repos/eworm-de/systemd/commits/4a6a24be180337f405591c7fa4fa112a765c53bb"},{"sha":"1f52a79d4eb0216bf1f2d96539609f02d8bb9e71","author":{"email":"9bb3d23d041c1d0454e62fec951f9aa4dfa2787f@poettering.net","name":"Lennart Poettering"},"message":"Merge pull request #2265 from ipuustin/ambient\n\ncapabilities: added support for ambient capabilities.","distinct":true,"url":"https://api.github.com/repos/eworm-de/systemd/commits/1f52a79d4eb0216bf1f2d96539609f02d8bb9e71"}]}