Top "Linux-capabilities" questions

Starting with kernel 2.2, Linux divides the privileges traditionally associated with superuser into distinct units, known as capabilities, which can be independently enabled and disabled.

Is there a way for non-root processes to bind to "privileged" ports on Linux?

It's very annoying to have this limitation on my development box, when there won't ever be any users other than …

linux root ipv6 iptables linux-capabilities
Privileged containers and capabilities

If I am running a container in privileged mode, does it have all the Kernel capabilities or do I need …

docker linux-kernel kubernetes linux-capabilities
Is it possible to configure Linux capabilities per user?

There appears to be support for fine-grained capabilities in Linux kernel, which allows granting privileges to a process to do …

linux security permissions linux-capabilities
How to find out what linux capabilities a process requires to work?

I am in a difficult situation where I don't know what linux capabilities a process requires to work. What is …

linux debugging linux-kernel linux-capabilities
Linux capabilities (setcap) seems to disable LD_LIBRARY_PATH

I use LD_LIBRARY_PATH to set the path of a certain user library for an application. But if I …

linux shared-libraries linux-capabilities
How to use CAP_SYS_ADMIN

Can somebody please explain to me how to use or set CAP_SYS_ADMIN in c? I need that capability …

c linux-capabilities
ubuntu and libcap (capabilities) undefined reference

I'm trying to compile the following minimal C code on ubuntu 10.10: #include <sys/capability.h> void main(void) { …

c ubuntu undefined-reference linux-capabilities
How can we add capabilities to a running docker container?

Is it possible to add a capability (for ex: NET_ADMIN) after the container has actually started? I started a …

docker containers linux-capabilities
setuid(0) with CAP_SETUID

I am trying to change my uid to 0 as non-root with the CAP_SETUID capability. I have the following program: #…

linux privileges linux-capabilities