wok view libcap-ng/description.txt @ rev 24765
afpfs-ng,btfs,curlftpfs,ddumbfs,djmount,encfs,exfat-utils,fusecloop,fusedav,fuseiso,httpfs2-fuse: try fuse2
| author | Pascal Bellard <pascal.bellard@slitaz.org> |
|---|---|
| date | Fri Mar 18 17:45:47 2022 +0000 (2022-03-18) |
| parents | |
| children |
line source
1 The libcap-ng library is intended to make programming with posix
2 capabilities much easier than the traditional libcap library.
3 It includes utilities that can analyse all currently running
4 applications and print out any capabilities and whether or not it
5 has an open ended bounding set. An open bounding set without the
6 securebits "NOROOT" flag will allow full capabilities escalation
7 for applications retaining uid 0 simply by calling execve.
9 The included utilities are designed to let administrators and
10 developers spot applications from various ways that may be running
11 with too much privilege. For example, any investigation should
12 start with network facing applications since they would be prime
13 targets for intrusion.
14 The netcap program will check all running applications and display
15 the results.