CAPSH(1) User Commands CAPSH(1) (NAME) capsh - (SYNOPSIS) capsh []... (DESCRIPTION) (Linux capabilities) . . . (OPTIONS) capsh . : --help capsh. --print . --current 1e IAB. -- [args] /bin/bash . -c 'command to execute' . -+ [args] cap_launch(3) . capsh 1 . == [args] capsh . exec() . capsh PATH PATH . exec --chroot=/some/path PATH . chroot . =+ [args] cap_launch(3) capsh . capsh 1 . --caps=cap-set cap-set. cap-set cap_text_formats(7) . --drop=cap-list (bounding set) . cap_from_name(3) . capsh CAP_SETPCAP . --inh=cap-list . capsh CAP_SETPCAP . --user=username UID GID getpwuid(3) getgrouplist(3) cap_setuid(3) cap_setgroups(3) . (permitted set) . --mode libcap cap_get_mode(3). --mode= cap_set_mode(3). securebit . --modes libcap --mode= . --inmode= 1. --uid=id UID id setuid(2). . --cap-uid= cap_setuid(3) UID . UID . . --is-uid= 1 UID . --gid= GID id setgid(2). --is-gid= 1 GID . --groups= . setgroups(2) . --user . --keep=<0|1> () . UID . setuid(2) . keep-caps . . 1 keep-caps . 0 keep-caps . exec() keep-caps . --secbits --mode . --secbits=N (security-bits) . PR_SET_SECUREBITS prctl(2) . . --print . strtoul(3) . --mode* . --chroot=/some/path chroot(2) (/) path. CAP_SYS_CHROOT . --forkfor=sec (fork) . 0 . . --killit . . --killit=sig --forkfor kill(2) . . capsh 1 . --explain=cap_xxx . cap_xxx capsh . --shell=/full/path == . --strict --caps= --inh= . CAP_SETPCAP (Inheritable) ( strict) (Permitted) . . . --suggest=phrase capsh phrase . --decode=N . /proc/1/status : CapInh: 0000000000000000 CapPrm: 0000003fffffffff CapEff: 0000003fffffffff CapBnd: 0000003fffffffff CapAmb: 0000000000000000 . : $ capsh --decode=3 0x0000000000000003=cap_chown,cap_dac_override --supports=xxx . . --supports=cap_syslog 2.6.27 capsh 1 . 2.6.38 . --has-p=xxx 1 permitted xxx . --has-ambient (ambient capabilities) . capsh 1 . --has-a=xxx 1 ambient xxx . --has-b=xxx 1 bounding xxx () . --iab=xxx IAB . xxx cap_iab_from_text(3) cap_text_formats(7) . --addamb=xxx . --delamb=xxx . --noamb . --noenv HOME USER --user . --quiet . capsh libcap . (EXIT STATUS) capsh 0 . capsh 1 . (AUTHORS) Andrew G. Morgan . (REPORTING BUGS) : https://bugzilla.kernel.org/buglist.cgi?component=libcap&list_id=1090757 (SEE ALSO) libcap(3), cap_from_text(3), cap_iab(3), cap_text_formats(7), capabilities(7), captree(8), getcap(8), getpcaps(8), setcap(8). libcap 2025-03-19 CAPSH(1)