capsh (8) Linux Manual Page
capsh – ‘bash’ wrapper to raise and lower the bset and pI capabilities
Description
/sbin/capsh [args …]
- –help
- this message
- display capability relevant state
- –decode=xxx
- decode a hex string to a list of caps
- –drop=xxx
- remove xxx,.. capabilities from bset
- –caps=xxx
- set caps as per cap_from_text()
- –inh=xxx
- set xxx,.. inheritiable set
- –secbits=<n>
- write a new value for securebits
- –keep=<n>
- set keep-capabability bit to <n>
- –uid=<n>
- set uid to <n> (hint: id <username>)
- –chroot=path
- chroot(2) to this path to invoke bash
- –killit=<n>
- send signal(n) to child
- –forkfor=<n>
- fork and make child sleep for <n> sec
- ==
- re-exec(capsh) with args as for —
- —
- remaing arguments are for /bin/bash (without — [/sbin/capsh] will simply exit(0))