NAME
capsh − ’bash’ wrapper to raise and lower the bset and pI capabilities
DESCRIPTION
/sbin/capsh [args ...]
−−help |
this message |
display capability relevant state
−−decode=xxx
decode a hex string to a list of caps
−−drop=xxx
remove xxx,.. capabilities from bset
−−caps=xxx
set caps as per cap_from_text()
−−inh=xxx
set xxx,.. inheritiable set
−−secbits=<n>
write a new value for securebits
−−keep=<n>
set keep−capabability bit to <n>
−−uid=<n>
set uid to <n> (hint: id <username>)
−−chroot=path
chroot(2) to this path to invoke bash
−−killit=<n>
send signal(n) to child
−−forkfor=<n>
fork and make child sleep for <n> sec
== |
re−exec(capsh) with args as for −− | ||
−− |
remaing arguments are for /bin/bash (without −− [/sbin/capsh] will simply exit(0)) |