Mrthfx

How to solve constants out of the internal energy equation?

Realistic Necromancy?

Size of electromagnet needed to replicate Earth's magnetic field

Real-world applications of fields, rings and groups in linear algebra.

web3.py web3.isConnected() returns false always

What makes accurate emulation of old systems a difficult task?

Seemingly unused edef prior to an ifx mysteriously affects the outcome of the ifx. Why?

Was there a Viking Exchange as well as a Columbian one?

How can Republicans who favour free markets, consistently express anger when they don't like the outcome of that choice?

Is the 5 MB static resource size limit a 5,242,880 bytes limit or a 5,000,000 bytes limit?

Why does flipping a pencil across a table make it move like this?

Why was Germany not as successful as other Europeans in establishing overseas colonies?

What is the most expensive material in the world that could be used to create Pun-Pun's lute?

How to stop co-workers from teasing me because I know Russian?

How do I reattach a shelf to the wall when it ripped out of the wall?

What happened to Captain America in Endgame?

Do I have an "anti-research" personality?

How would one muzzle a full grown polar bear in the 13th century?

How come there are so many candidates for the 2020 Democratic party presidential nomination?

How to creep the reader out with what seems like a normal person?

a sore throat vs a strep throat vs strep throat

Pulling the rope with one hand is as heavy as with two hands?

Combinable filters

TIKZ - changing one block into parallel multiple blocks

What does the “ep” capability means?

Unable to set capability CAP_SETFCAP by userFedora 14 root missing capabilityHow do I use capsh: I am trying to run an unprivileged ping, with minimal capabilitiesWhat does ` in Linux means?Granting service specific capabilitiesDoes every syscall require at most 1 capability on Linux?Better use ACL or Capability to let users start a service?Does a process that have the root user always have all of the capabilities available in Linux?Does macOS and Solaris have “capabilities”?Difference between file capability and process capability

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ margin-bottom:0;
}

3

root@macine:~# getcap ./some_bin

./some_bin =ep

What does "ep" means? What are the capabilities of this binary?

linux capabilities

share|improve this question

edited 1 hour ago

mosvy

10.8k11340

asked 1 hour ago

JamesJames

182

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  capabilities(7) have nothing to do with selinux. That file has all possible capabilities set.
  
  – mosvy
  1 hour ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  vulp3cula.gitbook.io/hackers-grimoire/post-exploitation/…
  
  – Jesse_b
  1 hour ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  e Effective This means the capability is “activated”. p Permitted This means the capability can be used/is allowed.
  
  – αғsнιη
  1 hour ago
  
  
  

  
  
  
  

add a comment | 

3

root@macine:~# getcap ./some_bin

./some_bin =ep

What does "ep" means? What are the capabilities of this binary?

linux capabilities

share|improve this question

edited 1 hour ago

mosvy

10.8k11340

asked 1 hour ago

JamesJames

182

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  capabilities(7) have nothing to do with selinux. That file has all possible capabilities set.
  
  – mosvy
  1 hour ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  vulp3cula.gitbook.io/hackers-grimoire/post-exploitation/…
  
  – Jesse_b
  1 hour ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  e Effective This means the capability is “activated”. p Permitted This means the capability can be used/is allowed.
  
  – αғsнιη
  1 hour ago
  
  
  

  
  
  
  

add a comment | 

root@macine:~# getcap ./some_bin

./some_bin =ep

What does "ep" means? What are the capabilities of this binary?

linux capabilities

share|improve this question

edited 1 hour ago

mosvy

10.8k11340

asked 1 hour ago

JamesJames

182

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

root@macine:~# getcap ./some_bin

./some_bin =ep

share|improve this question

edited 1 hour ago

mosvy

10.8k11340

asked 1 hour ago

JamesJames

182

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share|improve this question

edited 1 hour ago

mosvy

10.8k11340

asked 1 hour ago

JamesJames

182

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

edited 1 hour ago

mosvy

10.8k11340

edited 1 hour ago

mosvy

10.8k11340

asked 1 hour ago

JamesJames

182

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked 1 hour ago

JamesJames

182

2 Answers
2

active

oldest

votes

2

# getcap ./some_bin

./some_bin =ep

That file has ALL the capabilites set in the effective(e) and permitted(p) set.

In the textual representation of capabilities, a leading = is equivalent to all=.
From the cap_to_text(3) manpage:

In the case that the leading operator is =, and no list of capabilities is provided, the action-list is assumed to refer to all capabilities. For example, the following three clauses are equivalent to each
other (and indicate a completely empty capability set): all=; =;
cap_chown,<every-other-capability>=.

Such a binary can do whatever it pleases. Notice that this is only a "gotcha" of the textual representation used by libpcap: in the security.capability extended attribute of the file for which getcap will print /file/path =ep, all the meaningful bits are effectively on; for an empty security.capability, /file/path = (with the = not followed by anything) will be returned instead.

share|improve this answer

edited 1 min ago

answered 52 mins ago

mosvymosvy

10.8k11340

add a comment | 

2

The capabilities are put in the permitted set (p), and all permitted capabilities are copied into the effective set (e). There does not seem to be any capabilities in your example (where did you get it from?).

The e is used for legacy programs (possibly most programs at the current time), that is programs that don't know about capabilities, so can not them-selves copy capabilities from permitted to effective.

share|improve this answer

answered 1 hour ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

add a comment | 

Your Answer

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});

James is a new contributor. Be nice, and check out our Code of Conduct.

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f515881%2fwhat-does-the-ep-capability-means%23new-answer', 'question_page');
}
);

Post as a guest

Name

Email

Required, but never shown

2

# getcap ./some_bin

./some_bin =ep

That file has ALL the capabilites set in the effective(e) and permitted(p) set.

In the textual representation of capabilities, a leading = is equivalent to all=.
From the cap_to_text(3) manpage:

In the case that the leading operator is =, and no list of capabilities is provided, the action-list is assumed to refer to all capabilities. For example, the following three clauses are equivalent to each
other (and indicate a completely empty capability set): all=; =;
cap_chown,<every-other-capability>=.

Such a binary can do whatever it pleases. Notice that this is only a "gotcha" of the textual representation used by libpcap: in the security.capability extended attribute of the file for which getcap will print /file/path =ep, all the meaningful bits are effectively on; for an empty security.capability, /file/path = (with the = not followed by anything) will be returned instead.

share|improve this answer

edited 1 min ago

answered 52 mins ago

mosvymosvy

10.8k11340

add a comment | 

2

# getcap ./some_bin

./some_bin =ep

That file has ALL the capabilites set in the effective(e) and permitted(p) set.

In the textual representation of capabilities, a leading = is equivalent to all=.
From the cap_to_text(3) manpage:

In the case that the leading operator is =, and no list of capabilities is provided, the action-list is assumed to refer to all capabilities. For example, the following three clauses are equivalent to each
other (and indicate a completely empty capability set): all=; =;
cap_chown,<every-other-capability>=.

Such a binary can do whatever it pleases. Notice that this is only a "gotcha" of the textual representation used by libpcap: in the security.capability extended attribute of the file for which getcap will print /file/path =ep, all the meaningful bits are effectively on; for an empty security.capability, /file/path = (with the = not followed by anything) will be returned instead.

share|improve this answer

edited 1 min ago

answered 52 mins ago

mosvymosvy

10.8k11340

add a comment | 

# getcap ./some_bin

./some_bin =ep

That file has ALL the capabilites set in the effective(e) and permitted(p) set.

In the textual representation of capabilities, a leading = is equivalent to all=.
From the cap_to_text(3) manpage:

In the case that the leading operator is =, and no list of capabilities is provided, the action-list is assumed to refer to all capabilities. For example, the following three clauses are equivalent to each
other (and indicate a completely empty capability set): all=; =;
cap_chown,<every-other-capability>=.

Such a binary can do whatever it pleases. Notice that this is only a "gotcha" of the textual representation used by libpcap: in the security.capability extended attribute of the file for which getcap will print /file/path =ep, all the meaningful bits are effectively on; for an empty security.capability, /file/path = (with the = not followed by anything) will be returned instead.

share|improve this answer

edited 1 min ago

answered 52 mins ago

mosvymosvy

10.8k11340

share|improve this answer

edited 1 min ago

answered 52 mins ago

mosvymosvy

10.8k11340

answered 52 mins ago

mosvymosvy

10.8k11340

answered 52 mins ago

mosvymosvy

10.8k11340

2

The capabilities are put in the permitted set (p), and all permitted capabilities are copied into the effective set (e). There does not seem to be any capabilities in your example (where did you get it from?).

The e is used for legacy programs (possibly most programs at the current time), that is programs that don't know about capabilities, so can not them-selves copy capabilities from permitted to effective.

share|improve this answer

answered 1 hour ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

add a comment | 

2

The capabilities are put in the permitted set (p), and all permitted capabilities are copied into the effective set (e). There does not seem to be any capabilities in your example (where did you get it from?).

The e is used for legacy programs (possibly most programs at the current time), that is programs that don't know about capabilities, so can not them-selves copy capabilities from permitted to effective.

share|improve this answer

answered 1 hour ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

add a comment | 

The capabilities are put in the permitted set (p), and all permitted capabilities are copied into the effective set (e). There does not seem to be any capabilities in your example (where did you get it from?).

The e is used for legacy programs (possibly most programs at the current time), that is programs that don't know about capabilities, so can not them-selves copy capabilities from permitted to effective.

share|improve this answer

answered 1 hour ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

share|improve this answer

answered 1 hour ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

answered 1 hour ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

answered 1 hour ago

ctrl-alt-delorctrl-alt-delor

12.7k52663