/
niceSOFT
/
libcap
Обзор
Документация
Войти
/
niceSOFT
/
libcap
Код
Задачи
Вики
Пакеты
0
Релизы
0
Аналитика
Безопасность
master
doc/getcap.8
65 строк
2 KB
Andrew G. Morgan
Stop inlining bugzilla.kernel.org as its future is uncertain.
08 апр 2026, 16:36
08 апр 2026, 16:36
3ea5697
Код
Авторство
О чём код?
.\" originally written by Andrew Main <zefram@dcs.warwick.ac.uk> .TH GETCAP 8 "2026-04-07" .SH NAME getcap \- examine file capabilities .SH SYNOPSIS \fBgetcap\fP [\-v] [\-n] [\-r] [\-h] \fIfilename\fP [ ... ] .SH DESCRIPTION .B getcap displays the name and capabilities of each specified file. .SH OPTIONS .TP 4 .B \-h prints quick usage. .TP 4 .B \-n prints any non-zero user namespace root user ID value found to be associated with a file's capabilities. .TP 4 .B \-r enables recursive search. .TP 4 .B \-v display all searched entries, even if the have no file-capabilities. .PP NOTE: an .I empty value of .B '=' is .B not equivalent to an omitted (or removed) capability on a file. This is most significant with respect to the Ambient capability vector, since a process with Ambient capabilities will lose them when executing a file having .B '=' capabilities, but will retain the Ambient inheritance of privilege when executing a file with an omitted file capability. This special .I empty setting can be used to prevent a binary from executing with privilege. For some time, the kernel honored this suppression for root executing the file, but the kernel developers decided after a number of years that this behavior was unexpected for the superuser and reverted it just for that user identity. Suppression of root privilege, for a process tree, is possible, using the .BR capsh (1) .B \-\-mode option. .TP 4 .IR filename One file per line. .SH "REPORTING BUGS" Please report bugs via the bugtracker referenced at: .TP https://sites.google.com/site/fullycapable .SH "SEE ALSO" .BR capsh (1), .BR cap_get_file (3), .BR cap_to_text (3), .BR capabilities (7), .BR user_namespaces (7), .BR captree (8), .BR getpcaps (8) and .BR setcap (8).