WEB Setcap: Set File Capabilities
Understanding Setcap
Setcap is a Linux command-line tool used to modify the capabilities associated with files.
Setting File Capabilities
To set file capabilities, use the following syntax:
setcap -q -n -v capabilities filename
Verifying File Capabilities
To verify file capabilities, use the -v option:
setcap -q -n -v capabilities filename
File Capabilities
Since Linux kernel version 2.6.24, executable files can be associated with capability sets.
Examples
To set the cap_net_raw capability to enable RAW and PACKET usage:
setcap -q -n cap_net_raw=eip filename
Komentar