capsh (8) - Linux Manuals

capsh: 'bash' wrapper to raise and lower the bset and pI capabilities

NAME

capsh - 'bash' wrapper to raise and lower the bset and pI capabilities

DESCRIPTION

/sbin/capsh [args ...]
--help
this message
--print
display capability relevant state
--decode=xxx
decode a hex string to a list of caps
--drop=xxx
remove xxx,.. capabilities from bset
--caps=xxx
set caps as per cap_from_text()
--inh=xxx
set xxx,.. inheritiable set
--secbits=<n>
write a new value for securebits
--keep=<n>
set keep-capabability bit to <n>
--uid=<n>
set uid to <n> (hint: id <username>)
--chroot=path
chroot(2) to this path to invoke bash
--killit=<n>
send signal(n) to child
--forkfor=<n>
fork and make child sleep for <n> sec
==
re-exec(capsh) with args as for --
--
remaing arguments are for /bin/bash (without -- [/sbin/capsh] will simply exit(0))