Questions tagged [capsh]

Capability shell wrapper. Linux capability support and use can be explored and constrained with this tool. This tool provides a handy wrapper for certain types of capability testing and environment creation. It also provides some debugging features useful for summarizing capability state.

Capability shell wrapper. Linux capability support and use can be explored and constrained with this tool. This tool provides a handy wrapper for certain types of capability testing and environment creation. It also provides some debugging features useful for summarizing capability state.

2 questions
5
votes
1 answer

Using capsh to drop all capabilities

I'm trying to use capsh to grant myself a shell with no capabilities at all with a certain user. This is so I can test security stuff related to being non-root but with only certain capabilities. Basically I'd like to get a shell running with…
David
  • 3,324
  • 2
  • 27
  • 31
1
vote
0 answers

Get CentOS server capabilities in human-readable form using Python

I am trying to analyze capabilities associated to my CentOS server. I have output of ps aufxwwwZ command and for each process the content of /proc/$pid/status. This is part of the dump of the configuration of the server I want to analyze. I know I…
philippe
  • 2,949
  • 4
  • 20
  • 34