capsh
’bash’ wrapper to raise and lower the bset and pI capabilities
add an example, a script, a trick and tips
examples
no example yet ...
... Feel free to add your own example above to help other Linux-lovers !
description
/sbin/capsh
[args ...]
--print
display capability relevant
state
--decode=xxx
decode a hex string to a list
of caps
--drop=xxx
remove xxx,.. capabilities from
bset
--caps=xxx
set caps as per
cap_from_text()
--inh=xxx
set xxx,.. inheritiable set
--secbits=<n>
write a new value for
securebits
--keep=<n>
set keep-capabability bit
to <n>
--uid=<n>
set uid to <n> (hint: id
<username>)
--chroot=path
chroot(2) to this path to
invoke bash
--killit=<n>
send signal(n) to child
--forkfor=<n>
fork and make child sleep for
<n> sec
==
re-exec(capsh) with args as for
--
--
remaing arguments are for /bin/bash (without
-- [/sbin/capsh] will simply exit(0))