1FILECAP:(8) System Administration Utilities FILECAP:(8)
2
3
4
6 filecap - a program to see capabilities
7
9 filecap [ -a | -d | /dir | /dir/file [cap1 cap2 ...] ]
10
12 filecap is a program that prints out a report of programs with file
13 based capabilities. If a file is not in the report or there is no
14 report at all, no capabilities were found. For expedience, the default
15 is to check only the directories in the PATH environmental variable. If
16 the -a command line option is given, then all directories will be
17 checked. If a directory is passed, it will recursively check that
18 directory. If a path to a file is given, it will only check that file.
19 If the path to the file includes capabilities, then they are written to
20 the file.
21
22
24 -a This tells the program to show all capabilities starting from
25 the / directory. Normally the PATH environmental variable is
26 used to show you capabilities on files you are likely to exe‐
27 cute.
28
29 -d This dumps all capabilities for reference.
30
31
33 To check file capabilities in $PATH:
34 filecap
35
36 To check file capabilities of whole system:
37 filecap -a
38
39 To check file capabilities recursively in a directory:
40 filecap /usr
41
42 To check file capabilities of a specific program:
43 filecap /bin/passwd
44
45 To list all possible capabilities:
46 filecap -d
47
48 To set a file capability on a specific program:
49 filecap /bin/ping net_raw net_admin
50
52 pscap(8), netcap(8), capabilities(7).
53
54
56 Steve Grubb
57
58
59
60Red Hat March 2009 FILECAP:(8)