1singularity(1)                                                  singularity(1)
2
3
4

NAME

6       singularity-capability-drop - Remove capabilities from a user or group
7       (requires root)
8
9
10

SYNOPSIS

12       singularity capability drop [drop options...] <capabilities>
13
14
15

DESCRIPTION

17       Remove Linux capabilities from a user/group. NOTE: This command
18       requires root
19         to run.
20
21
22       The capabilities argument must be separated by commas and is not case
23         sensitive.
24
25
26       To see available capabilities, type "singularity capability avail" or
27       refer to
28         capabilities manual "man 7 capabilities"
29
30
31

OPTIONS

33       -g, --group=""
34           manage capabilities for a group
35
36
37       -h, --help[=false]
38           help for drop
39
40
41       -u, --user=""
42           manage capabilities for a user
43
44
45

EXAMPLE

47                $ sudo singularity capability drop --user nobody AUDIT_READ,CHOWN
48                $ sudo singularity capability drop --group nobody audit_write
49
50                To drop all capabilities for a user:
51
52                $ sudo singularity capability drop --user nobody all
53
54
55
56

SEE ALSO

58       singularity-capability(1)
59
60
61

HISTORY

63       18-Feb-2020 Auto generated by spf13/cobra
64
65
66
67Auto generated by spf13/cobra      Feb 2020                     singularity(1)