capng_get_caps_fd(3) [centos man page]

CAPNG_GET_CAPS_FD(3)						   Libcap-ng API					      CAPNG_GET_CAPS_FD(3)

NAME

       capng_get_caps_fd -

SYNOPSIS

       #include <cap-ng.h>

       int capng_get_caps_fd(int fd);

DESCRIPTION

       This  function  will read the file based capabilities stored in extended attributes of the file that the descriptor was opened against. The
       bounding set is not included in file based capabilities operations. Note that this function will only work if compiled  on  a  kernel  that
       supports  file  based  capabilities such as 2.6.26 and later. If the "magic" bit is set, then all effect capability bits are set. Otherwise
       the bits are cleared.

RETURN VALUE

       This returns 0 on success and -1 on failure.

SEE ALSO

       capng_set_caps_fd(3), capabilities(7)

AUTHOR

       Steve Grubb

Red Hat 							     June 2009						      CAPNG_GET_CAPS_FD(3)

FILECAP:(8)						  System Administration Utilities					       FILECAP:(8)

NAME

       filecap - a program to see capabilities

SYNOPSIS

       filecap [ -a | -d | /dir | /dir/file [cap1 cap2 ...] ]

DESCRIPTION

       filecap	is  a  program	that  prints  out a report of programs with file based capabilities. If a file is not in the report or there is no
       report at all, no capabilities were found. For expedience, the default is to check only the directories in the PATH environmental variable.
       If  the	-a  command  line  option is given, then all directories will be checked. If a directory is passed, it will recursively check that
       directory. If a path to a file is given, it will only check that file. If the path to the file includes capabilities, then they are written
       to the file.

OPTIONS

       -a     This  tells  the program to show all capabilities starting from the / directory. Normally the PATH environmental variable is used to
	      show you capabilities on files you are likely to execute.

       -d     This dumps all capabilities for reference.

EXAMPLES

       To check file capabilities in $PATH:
       filecap

       To check file capabilities of whole system:
       filecap -a

       To check file capabilities recursively in a directory:
       filecap /usr

       To check file capabilities of a specific program:
       filecap /bin/passwd

       To list all possible capabilities:
       filecap -d

       To set a file capability on a specific program:
       filecap /bin/ping net_raw net_admin

SEE ALSO

       pscap(8), netcap(8), capabilities(7).

AUTHOR

       Steve Grubb

Red Hat 							    March 2009							       FILECAP:(8)