netcap(8) [x11r4 man page]
NETCAP:(8) System Administration Utilities NETCAP:(8) NAME
netcap - a program to see capabilities SYNOPSIS
netcap DESCRIPTION
netcap is a program that prints out a report of process capabilities. If the application is using tcp, udp, raw, or packet family of sock- ets AND has any capabilities, it will be in the report. If the process has partial capabilities, it is further examined to see if it has an open-ended bounding set. If this is found to be true, a '+' symbol is added. Some directories in the /proc file system are readonly by root. The program will try to access and report what it can. But if nothing comes out, try changing to the root user and re-run this program. SEE ALSO
pscap(8), filecap(8), capabilities(7), netstat(8). AUTHOR
Steve Grubb Red Hat March 2009 NETCAP:(8)
Check Out this Related Man Page
FILECAP:(8) System Administration Utilities FILECAP:(8) NAME
filecap - a program to see capabilities SYNOPSIS
filecap [ -a | -d | /dir | /dir/file [cap1 cap2 ...] ] DESCRIPTION
filecap is a program that prints out a report of programs with file based capabilities. If a file is not in the report or there is no report at all, no capabilities were found. For expedience, the default is to check only the directories in the PATH environmental variable. If the -a command line option is given, then all directories will be checked. If a directory is passed, it will recursively check that directory. If a path to a file is given, it will only check that file. If the path to the file includes capabilities, then they are written to the file. OPTIONS
-a This tells the program to show all capabilities starting from the / directory. Normally the PATH environmental variable is used to show you capabilities on files you are likely to execute. -d This dumps all capabilities for reference. EXAMPLES
To check file capabilities in $PATH: filecap To check file capabilities of whole system: filecap -a To check file capabilities recursively in a directory: filecap /usr To check file capabilities of a specific program: filecap /bin/passwd To list all possible capabilities: filecap -d To set a file capability on a specific program: filecap /bin/ping net_raw net_admin SEE ALSO
pscap(8), netcap(8), capabilities(7). AUTHOR
Steve Grubb Red Hat March 2009 FILECAP:(8)