blob: 63e9d0017090d48b501b6059baeb902255fd85ee (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
|
<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
<!ENTITY % general-entities SYSTEM "../general.ent">
%general-entities;
]>
<sect1 id="ch-system-libcap" role="wrap">
<?dbhtml filename="libcap.html"?>
<sect1info condition="script">
<productname>libcap</productname>
<productnumber>&libcap-version;</productnumber>
<address>&libcap-url;</address>
</sect1info>
<title>Libcap-&libcap-version;</title>
<indexterm zone="ch-system-libcap">
<primary sortas="a-Libcap">Libcap</primary>
</indexterm>
<sect2 role="package">
<title/>
<para>The Libcap package implements the user-space interfaces to the POSIX
1003.1e capabilities available in Linux kernels. These capabilities are a
partitioning of the all powerful root privilege into a set of distinct
privileges.</para>
<segmentedlist>
<segtitle>&buildtime;</segtitle>
<segtitle>&diskspace;</segtitle>
<seglistitem>
<seg>&libcap-ch6-sbu;</seg>
<seg>&libcap-ch6-du;</seg>
</seglistitem>
</segmentedlist>
</sect2>
<sect2 role="installation">
<title>Installation of Libcap</title>
<para>Compile the package:</para>
<screen><userinput remap="make">make</userinput></screen>
<para>This package does not come with a test suite.</para>
<para>Install the package:</para>
<screen><userinput remap="install">make RAISE_SETFCAP=no prefix=/usr install
chmod -v 755 /usr/lib/libcap.so</userinput></screen>
<para>The shared library needs to be moved to
<filename class="directory">/lib</filename>, and as a result the
<filename class="extension">.so</filename> file in
<filename class="directory">/usr/lib</filename> will need to be recreated:</para>
<screen><userinput remap="install">mv -v /usr/lib/libcap.so.* /lib
ln -sfv ../../lib/$(readlink /usr/lib/libcap.so) /usr/lib/libcap.so</userinput></screen>
</sect2>
<sect2 id="contents-libcap" role="content">
<title>Contents of Libcap</title>
<segmentedlist>
<segtitle>Installed programs</segtitle>
<segtitle>Installed library</segtitle>
<seglistitem>
<seg>capsh, getcap, getpcaps, and setcap</seg>
<seg>libcap.{a,so}</seg>
</seglistitem>
</segmentedlist>
<variablelist>
<bridgehead renderas="sect3">Short Descriptions</bridgehead>
<?dbfo list-presentation="list"?>
<?dbhtml list-presentation="table"?>
<varlistentry id="capsh">
<term><command>capsh</command></term>
<listitem>
<para>A shell wrapper to explore and constrain capability support</para>
<indexterm zone="ch-system-libcap capsh">
<primary sortas="b-capsh">capsh</primary>
</indexterm>
</listitem>
</varlistentry>
<varlistentry id="getcap">
<term><command>getcap</command></term>
<listitem>
<para>Examines file capabilities</para>
<indexterm zone="ch-system-libcap getcap">
<primary sortas="b-getcap">getcap</primary>
</indexterm>
</listitem>
</varlistentry>
<varlistentry id="getpcaps">
<term><command>getpcaps</command></term>
<listitem>
<para>Displays the capabilities on the queried process(es)</para>
<indexterm zone="ch-system-libcap getpcaps">
<primary sortas="b-getpcaps">getpcaps</primary>
</indexterm>
</listitem>
</varlistentry>
<varlistentry id="libcap">
<term><filename class="libraryfile">libcap</filename></term>
<listitem>
<para>Contains the libcap API functions</para>
<indexterm zone="ch-system-libcap libcap">
<primary sortas="c-libcap">libcap</primary>
</indexterm>
</listitem>
</varlistentry>
</variablelist>
</sect2>
</sect1>
|
