日本語のみで絞り込む
2026/9/9 -The kernel must provide system calls allowing a thread's capability sets to be changed and retrieved. • The filesystem must support attaching ...
2023/9/14 -The Linux Kernel started introducing 'capabilities' all the way back in kernel 2.x. BSD has a similar (though different) concept using the ...
Starting with kernel 2.2, Linux divides the privileges traditionally associated with superuser into distinct units, known as capabilities, which can be ...
2024/8/2 -Linux capabilities represent a powerful and flexible approach to security. By breaking down the traditional all-or-nothing root privileges into ...
2026/10/3 -Linux capabilities are a way to improve permission granularity in unix-like systems. It allows to follow the least-privilege principle by ...
2025/10/22 -I find Linux's approach on capabilities underwhelming, and not even close to a true capability-based system.
Linux kernel capabilities are the mechanism that splits traditional root privilege into smaller permissions, so a process can be granted only the specific ...
Secure Computing Mode (seccomp) is a kernel feature that allows you to filter system calls to the kernel from a container. The combination of restricted and ...
2019/5/18 -I'll explain the exact differences below, but here's the general explanation: Capabilities involve various checks in kernel functions reachable ...
Linux capabilities split root's power into ~40 discrete privileges that can be granted independently. Based on the withdrawn POSIX.1e draft standard; introduced ...