diff --git a/pages/linux/setcap.md b/pages/linux/setcap.md new file mode 100644 index 000000000..962d12142 --- /dev/null +++ b/pages/linux/setcap.md @@ -0,0 +1,25 @@ +# setcap + +> Set capabilities of specified file. +> See also: `tldr getcap`. +> More information: . + +- Set capability `cap_net_raw` (to use RAW and PACKET sockets) for a given file: + +`setcap '{{cap_net_raw}}' {{path/to/file}}` + +- Set multiple capabilities on a file (ep behind the capability means "effective permitted"): + +`setcap '{{cap_dac_read_search,cap_sys_tty_config+ep}}' {{path/to/file}}` + +- Remove all capabilities from a file: + +`setcap -r {{path/to/file}}` + +- Verify that the specified capabilities are currently associated with the specified file: + +`setcap -v '{{cap_net_raw}}' {{path/to/file}}` + +- The optional `-n {{rootuid}}` argument can be used to set the file capability for use only in a user namespace with this root user ID owner: + +`setcap -n {{rootuid}} '{{cap_net_admin}}' {{path/to/file}}`