setcap: add page (#9850)

* setcap: add page

* Update pages/linux/setcap.md

Co-authored-by: K.B.Dharun Krishna <kbdharunkrishna@gmail.com>
pull/3/head
Ravi 2023-02-14 12:56:54 +05:30 committed by GitHub
parent a624fa1a9e
commit 4e6e06483e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 25 additions and 0 deletions

25
pages/linux/setcap.md Normal file
View File

@ -0,0 +1,25 @@
# setcap
> Set capabilities of specified file.
> See also: `tldr getcap`.
> More information: <https://manned.org/setcap>.
- Set capability `cap_net_raw` (to use RAW and PACKET sockets) for a given file:
`setcap '{{cap_net_raw}}' {{path/to/file}}`
- Set multiple capabilities on a file (ep behind the capability means "effective permitted"):
`setcap '{{cap_dac_read_search,cap_sys_tty_config+ep}}' {{path/to/file}}`
- Remove all capabilities from a file:
`setcap -r {{path/to/file}}`
- Verify that the specified capabilities are currently associated with the specified file:
`setcap -v '{{cap_net_raw}}' {{path/to/file}}`
- The optional `-n {{rootuid}}` argument can be used to set the file capability for use only in a user namespace with this root user ID owner:
`setcap -n {{rootuid}} '{{cap_net_admin}}' {{path/to/file}}`