Disable capabilities usage

When enable libgcrypt drop all capabilities and this brakes apps like
cryptsetup.

Test case:
-bash-4.2# dd if=/dev/zero of=raw bs=1024k count=256
256+0 records in
256+0 records out
268435456 bytes (268 MB) copied, 2.43644 s, 110 MB/s
-bash-4.2# dd if=/dev/urandom of=key bs=1k count=20
20+0 records in
20+0 records out
20480 bytes (20 kB) copied, 0.00640287 s, 3.2 MB/s
-bash-4.2# cryptsetup luksFormat raw key

WARNING!
========
This will overwrite data on raw irrevocably.

Are you sure? (Type uppercase yes): YES
-bash-4.2# strace -eioctl cryptsetup luksOpen raw x --key-file=key
ioctl(5, DM_VERSION, 0x156a930)         = -1 EACCES (Permission denied)
Cannot initialize device-mapper. Is dm_mod kernel module loaded?
+++ exited with 1 +++

diff --git a/libgcrypt.spec b/libgcrypt.spec
index 93e1e8de9ed4a70f559814064abe9296e3beff5a..919bd9243564ec8b931b8c37a99830de85e8fd5c 100644 (file)
--- a/libgcrypt.spec
+++ b/libgcrypt.spec
@@ -1,7 +1,7 @@
 #
 # Conditional build:
 %bcond_without dietlibc        # don't build static dietlibc library
-%bcond_without libcap          # Linux capabilities usage
+%bcond_with    libcap          # Linux capabilities usage
 #
 Summary:       Cryptographic library based on the code from GnuPG
 Summary(es.UTF-8):     Libgcrypt es una biblioteca general de desarrole embasada em GnuPG
@@ -9,7 +9,7 @@ Summary(pl.UTF-8):      Biblioteka kryptograficzna oparta na kodzie GnuPG
 Summary(pt_BR.UTF-8):  libgcrypt é uma biblioteca de criptografia de uso geral baseada no GnuPG
 Name:          libgcrypt
 Version:       1.5.2
-Release:       1
+Release:       2
 License:       LGPL v2.1+
 Group:         Libraries
 Source0:       ftp://ftp.gnupg.org/gcrypt/libgcrypt/%{name}-%{version}.tar.bz2