getcap command

getcap queries the available file capabilities

Typical usage: diagnosing permission issues, hardening of system services, binary analysis

Introduction into getcap

The getcap is a very small utility that can show what file capabilities a provided binary has. This may help better understanding the available Linux capabilities that are available to the binary and related process.

Installation

When getcap is not installed by default, it can be added to the system using the relevant software package.

Package information for getcap

Operating systemPackage nameInstallation
AlmaLinuxlibcap
dnf install libcap
Arch Linuxlibcap
pacman -S libcap
Debianlibcap2-bin
apt install libcap2-bin
Fedoralibcap
dnf install libcap
Red Hat Enterprise Linuxlibcap
dnf install libcap
Rocky Linuxlibcap
dnf install libcap
openSUSElibcap-progs
zypper install libcap-progs
Ubuntulibcap2-bin
apt install libcap2-bin

Your Linux distribution using a different package? Share your feedback.

Usage

Frequently Asked Questions

What is the getcap command and its purpose?

The getcap command is a command-line tool to show any file capabilities that might be available to a given file.

Which package provides the getcap command?

The command getcap is provided by the libcap, libcap-progs, or libcap2-bin package.

Relevant articles using the getcap command

The following articles include an example on how to use getcap and might be worth further exploring.

Related and similar commands

Linux has a lot of tools and commands available and sometimes you just need that little other tool. Here is a list of commands that are similar or related to getcap:

Related and similar commands to getcap
CommandCategorySummary
capshcapabilitiesLinux capabilities testing and debugging tool
captestcapabilitiesCapabilities and privilege escalation testing tool
filecapcapabilitiesDisplay of Linux capabilities set on binaries in paths
firejailsandboxingSandboxing tool for Linux
getpcapscapabilitiesShow process capabilities
netcapcapabilitiesDisplay available capabilities for running processes using network sockets
pscapcapabilitiesDisplay available capabilities for running processes
setcapcapabilitiesAdd or remove Linux capabilities to a file