How to use CAP_SYS_ADMIN

Ste picture Ste · Oct 22, 2014 · Viewed 12.9k times · Source

Can somebody please explain to me how to use or set CAP_SYS_ADMIN in c? I need that capability to unmount a usb drive but don't know how to use it.

Answer

starfry picture starfry · Jul 8, 2015

Here's how to do it using the command-line:

$  sudo setcap cap_sys_admin+ep executable-name

and

$ getcap executable-name
executable-name = cap_sys_admin+ep

You, of course, need the libcap package.

A good place to learn how to do it in C would be the source for setcap which is here