Linux capabilities
Tools
| File | Description |
|---|---|
| captest | captest performs a set of tests related to capabilities and demonstrates them |
| filecap | filecap shows available capabilities set on binaries in $PATH or specified directory |
| netcap | netcap shows an overview of network-related processes and their capabilities |
| pscap | pscap shows an overview of processes and their assigned capabilities |
Linux capabilities 101
Introduction guide and tutorial about the inner workings of Linux capabilities and how these capabilities are applied when running Linux processes.
Linux Capabilities: Hardening Linux binaries by removing setuid
Setuid binaries may be a risk for the system. We will investigate how to remove the setuid bit and use Linux capabilities instead, to reduce the risks.
Overview of Linux capabilities
Linux capabilities provide a way to separate privileged actions. This overview shows the available Linux capabilities and their purpose.