Back to the article

Capabilities: root split into parts

cheat sheet · Ubuntu 24.04 · Linux 6.8 · systemd 255 https://lab.dimsanych.ru/en/wiki/capabilities/

Cheat sheet

grep Cap /proc/self/status sets of the current process
capsh --decode=0000000000000400 mask → names
getpcaps 1234 capabilities of a process by PID
getcap -r / 2>/dev/null files with capabilities
sudo setcap cap_net_bind_service=+ep /usr/local/bin/app give a file
sudo setcap -r /usr/local/bin/app remove
sudo capsh --drop=cap_dac_override -- -c 'cat f' root minus a part