1singularity(1) singularity(1)
2
3
4
6 singularity-capability - Manage Linux capabilities for users and groups
7
8
9
11 singularity capability
12
13
14
16 Capabilities allow you to have fine grained control over the permis‐
17 sions that
18 your containers need to run.
19
20
21 NOTE: capability add/drop commands require root to run. Granting capa‐
22 bilities
23 to users allows them to escalate privilege inside the container and
24 will
25 likely give them a route to privilege escalation on the host system
26 as well.
27 Do not add capabilities to users who should not have root on the host
28 system.
29
30
31
33 -h, --help[=false] help for capability
34
35
36
38 All group commands have their own help output:
39
40 $ singularity help capability add
41 $ singularity capability add --help
42
43
44
45
47 singularity(1), singularity-capability-add(1), singularity-capabil‐
48 ity-avail(1), singularity-capability-drop(1), singularity-capabil‐
49 ity-list(1)
50
51
52
54 11-Mar-2021 Auto generated by spf13/cobra
55
56
57
58Auto generated by spf13/cobra Mar 2021 singularity(1)