日本語のみで絞り込む
2016/8/15 -To remove capabilities from a file use the -r flag setcap -r /path/to/program. This will result in the program having no capabilities.
2026/9/9 -Removing capabilities from the bounding set is supported only if file capabilities are compiled into the kernel. Before Linux 2.6.33, file ...
2017/8/27 -The idea is to break up the monolithic root privilege that Linux systems have had, so that smaller more specific privileges can be provided ...
2013/12/21 -Removing capabilities from the bounding set is supported only if file capabilities are compiled into the kernel. In kernels before Linux 2.6.33, ...
Setuid binaries may be a risk for the system. We will investigate how to remove the setuid bit and use Linux capabilities instead, to reduce the risks.
2024/3/18 -Removing Capabilities With setcap. There may be times when we need to strip away these special permissions we have assigned to a file.
Now we know for sure that this works as expected. Remove Capabilities. You can remove capabilities of a binary with. setcap -r </path/to/binary>. User ...
2025/9/13 -5️⃣ Assigning or Removing Capabilities ( setcap ). (Use with caution — only on test systems.) # Grant net_raw to ping (example; many distros ...
2022/7/22 -My question is why does Linux not allow removing a capability from your bounding set unless you hold the CAP_SETPCAP capability? It seems odd ...
A thread may remove capabilities from its capability bounding set using the prctl(2) PR_CAPBSET_DROP operation, provided it has the CAP_SETPCAP capability. Once ...