v1.5.5
~~~~~~
1) Added useful mkchroot script that creates directory tree with needed
   libraries for chrooted executables.

2) Fixed stupid bug in code that sets new root directory after execve.
   Since now, it correctly changes current working directory to the new 
   root directory.
   Thanks to Miroslaw Ziemski for testing new 'root' feature and
   reporting the problem.

3) Fixed Makefile to properly compile with SMP kernels.
   Problems reported by Piotr Majka.

4) Added additional check in new_execve to prevent executing new binary 
   if some parts of the calling process are shared.


v1.5.4
~~~~~~
1) Fixed UIDs and GIDs checks in find_rule().

2) Fixed bug in 'gid' option parsing.

4) Added argument 'default' to the 'cap' and 'uidcap' options.

5) Fixed typos in sample configurations.

6) Added new 'root' option.


v1.5.3
~~~~~~
1) Fixed stupid race conditions with exename global variable.

2) Fixed serious bug in new_chroot() not checking filename argument before use.

3) Modified ptrace checks in new_execve().

4) Fixed expressions with kernel_cap_t type to compile correctly with
   STRICT_CAP_T_TYPECHECKS.

5) Minor changes in check_chroot() and resolve_path().

6) New configurations added + workaround in configuration for proftpd daemon
   for permission/CAP_DAC_READ_SEARCH kernel bug (should be fixed in 2.2.17).
   Thanks to Miroslaw Ziemski for reporting the chroot problem with proftpd.

7) Created source directory tree.

8) README updated.


v1.5.2
~~~~~~
1) Added 'conf' directory with common configuration for various
   programs.

2) Minor bugs fixed in new_execve function.
   Thanks to Wojciech Kaniewski for CAP_SYS_PTRACE fix.

3) Added workaround for kernels 2.1.x and 2.2.x that doesn't have VFS support
   for capabilities and do_execve may return -EPERM if caller doesn't have full
   capability set.


v1.5.1
~~~~~~
1) Added feature that prevents ptracing and dumping core of executables
   by users that have no permissions to read them (thx lcamtuf).


v1.5.0
~~~~~~
1) Updated to kernel version 2.2.16.

2) Added new 'uidcap' feature that allows to leave some privileges
   after changing process's UID from rule->uid to something else.

3) CAPABILITIES descriptions updated to 2.2.16.

4) Few little changes to the code.

5) README file ready.

6) Added sample configuration file.

7) Added Linux-Privs.tar archive of documents describing capability system
   by Andrew Morgan.


v1.4.1
~~~~~~
1) Added value 'any' into 'uid' and 'gid' options.


v1.4.0
~~~~~~
First release of this loadable linux kernel module.
It has 1.4.0 version number because it is based on my old 'execve'
module whose last version was 1.2.x.
