setcap

Set capabilities of specified file. See also: tldr getcap. More information: <https://manned.org/setcap>.

Install

All systems
curl cmd.cat/setcap.sh
Debian Debian
apt-get install libcap2-bin
Ubuntu
apt-get install libcap2-bin
Alpine
apk add libcap
Arch Arch Linux
pacman -S libcap
image/svg+xml Kali Linux
apt-get install libcap2-bin
CentOS
yum install libcap
Fedora
dnf install libcap
Windows (WSL2)
sudo apt-get update sudo apt-get install libcap2-bin
Raspbian
apt-get install libcap2-bin
Dockerfile
dockerfile.run/setcap
Docker
docker run cmd.cat/setcap setcap powered by Commando

Set capabilities of specified file. See also: tldr getcap. More information: <https://manned.org/setcap>.

  • Set capability `cap_net_raw` (to use RAW and PACKET sockets) for a given file:
    setcap 'cap_net_raw' path/to/file
  • Set multiple capabilities on a file (`ep` behind the capability means "effective permitted"):
    setcap 'cap_dac_read_search,cap_sys_tty_config+ep' path/to/file
  • Remove all capabilities from a file:
    setcap -r path/to/file
  • Verify that the specified capabilities are currently associated with the specified file:
    setcap -v 'cap_net_raw' path/to/file
  • The optional `-n root_uid` argument can be used to set the file capability for use only in a user namespace with this root user ID owner:
    setcap -n root_uid 'cap_net_admin' path/to/file

© tl;dr; authors and contributors