getcap command
getcap queries the available file capabilities
Typical usage: diagnosing permission issues, hardening of system services, binary analysisIntroduction into getcap
The getcap is a very small utility that can show what file capabilities a provided binary has. This may help better understanding the available Linux capabilities that are available to the binary and related process.
Installation
When getcap is not installed by default, it can be added to the system using the relevant software package.
Package information for getcap
Operating system | Package name | Installation |
---|---|---|
AlmaLinux | libcap |
|
Arch Linux | libcap |
|
Debian | libcap2-bin |
|
Fedora | libcap |
|
Red Hat Enterprise Linux | libcap |
|
Rocky Linux | libcap |
|
openSUSE | libcap-progs |
|
Ubuntu | libcap2-bin |
|
Your Linux distribution using a different package? Share your feedback.
Usage
Frequently Asked Questions
What is the getcap command and its purpose?
The getcap command is a command-line tool to show any file capabilities that might be available to a given file.
Which package provides the getcap command?
The command getcap is provided by the libcap, libcap-progs, or libcap2-bin package.
Relevant articles using the getcap command
The following articles include an example on how to use getcap and might be worth further exploring.
Related and similar commands
Linux has a lot of tools and commands available and sometimes you just need that little other tool. Here is a list of commands that are similar or related to getcap:
Command | Category | Summary |
---|---|---|
capsh | capabilities | Linux capabilities testing and debugging tool |
captest | capabilities | Capabilities and privilege escalation testing tool |
filecap | capabilities | Display of Linux capabilities set on binaries in paths |
firejail | sandboxing | Sandboxing tool for Linux |
getpcaps | capabilities | Show process capabilities |
netcap | capabilities | Display available capabilities for running processes using network sockets |
pscap | capabilities | Display available capabilities for running processes |
setcap | capabilities | Add or remove Linux capabilities to a file |