Mrthfx

Examples of subgroups where it's nontrivial to show closure under multiplication?

How do I deal with a coworker that keeps asking to make small superficial changes to a report, and it is seriously triggering my anxiety?

French for 'It must be my imagination'?

How to creep the reader out with what seems like a normal person?

How to have a sharp product image?

Do I have to worry about players making “bad” choices on level up?

What makes accurate emulation of old systems a difficult task?

What's causes the 'backspin' while sliding a pencil along a table?

What was the first Intel x86 processor with "Base + Index * Scale + Displacement" addressing mode?

What software provides a code editing environment on iPad?

How to stop co-workers from teasing me because I know Russian?

How to write a column outside the braces in a matrix?

Map of water taps to fill bottles

Does a semiconductor follow Ohm's law?

Can I spend a night at Vancouver then take a flight to my college in Toronto as an international student?

Why other Westeros houses don't use wildfire?

Is it possible to determine the symmetric encryption method used by output size?

How does a program know if stdout is connected to a terminal or a pipe?

As an international instructor, should I openly talk about my accent?

How can I place the product on a social media post better?

web3.py web3.isConnected() returns false always

How can Republicans who favour free markets, consistently express anger when they don't like the outcome of that choice?

What language was spoken in East Asia before Proto-Turkic?

How exactly does Hawking radiation decrease the mass of black holes?

What does the “ep” capability mean?

Unable to set capability CAP_SETFCAP by userFedora 14 root missing capabilityHow do I use capsh: I am trying to run an unprivileged ping, with minimal capabilitiesWhat does ` in Linux means?Granting service specific capabilitiesDoes every syscall require at most 1 capability on Linux?Better use ACL or Capability to let users start a service?Does a process that have the root user always have all of the capabilities available in Linux?Does macOS and Solaris have “capabilities”?Difference between file capability and process capability

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ margin-bottom:0;
}

3

root@macine:~# getcap ./some_bin

./some_bin =ep

What does "ep" mean? What are the capabilities of this binary?

linux capabilities

share|improve this question

edited 22 mins ago

muru

38.1k590166

asked 2 hours ago

JamesJames

212

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

• 
  
  
  

  
  2
  

  
  
  
  
  
  

  
  
  capabilities(7) have nothing to do with selinux. That file has all possible capabilities set.
  
  – mosvy
  2 hours ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  vulp3cula.gitbook.io/hackers-grimoire/post-exploitation/…
  
  – Jesse_b
  2 hours ago
  

  
  
  
  

add a comment | 

3

root@macine:~# getcap ./some_bin

./some_bin =ep

What does "ep" mean? What are the capabilities of this binary?

linux capabilities

share|improve this question

edited 22 mins ago

muru

38.1k590166

asked 2 hours ago

JamesJames

212

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

• 
  
  
  

  
  2
  

  
  
  
  
  
  

  
  
  capabilities(7) have nothing to do with selinux. That file has all possible capabilities set.
  
  – mosvy
  2 hours ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  vulp3cula.gitbook.io/hackers-grimoire/post-exploitation/…
  
  – Jesse_b
  2 hours ago
  

  
  
  
  

add a comment | 

root@macine:~# getcap ./some_bin

./some_bin =ep

What does "ep" mean? What are the capabilities of this binary?

linux capabilities

share|improve this question

edited 22 mins ago

muru

38.1k590166

asked 2 hours ago

JamesJames

212

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

root@macine:~# getcap ./some_bin

./some_bin =ep

share|improve this question

edited 22 mins ago

muru

38.1k590166

asked 2 hours ago

JamesJames

212

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share|improve this question

edited 22 mins ago

muru

38.1k590166

asked 2 hours ago

JamesJames

212

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

edited 22 mins ago

muru

38.1k590166

edited 22 mins ago

muru

38.1k590166

asked 2 hours ago

JamesJames

212

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked 2 hours ago

JamesJames

212

2 Answers
2

active

oldest

votes

4

# getcap ./some_bin

./some_bin =ep

That file has ALL the capabilites set in the effective(e) and permitted(p) set.

In the textual representation of capabilities, a leading = is equivalent to all=.
From the cap_to_text(3) manpage:

In the case that the leading operator is =, and no list of capabilities is provided, the action-list is assumed to refer to all capabilities. For example, the following three clauses are equivalent to each
other (and indicate a completely empty capability set): all=; =;
cap_chown,<every-other-capability>=.

Such a binary can do whatever it pleases. Notice that this is only a "gotcha" of the textual representation used by libpcap: in the security.capability extended attribute of the file for which getcap will print /file/path =ep, all the meaningful bits are effectively on; for an empty security.capability, /file/path = (with the = not followed by anything) will be returned instead.

share|improve this answer

edited 1 hour ago

answered 1 hour ago

mosvymosvy

10.9k11340

add a comment | 

5

The capabilities are put in the permitted set (p), and all permitted capabilities are copied into the effective set (e). There does not seem to be any capabilities in your example (where did you get it from?).

The e is used for legacy programs (possibly most programs at the current time), that is programs that don't know about capabilities, so can not them-selves copy capabilities from permitted to effective.

share|improve this answer

answered 2 hours ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

add a comment | 

Your Answer

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});

James is a new contributor. Be nice, and check out our Code of Conduct.

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f515881%2fwhat-does-the-ep-capability-mean%23new-answer', 'question_page');
}
);

Post as a guest

Name

Email

Required, but never shown

4

# getcap ./some_bin

./some_bin =ep

That file has ALL the capabilites set in the effective(e) and permitted(p) set.

In the textual representation of capabilities, a leading = is equivalent to all=.
From the cap_to_text(3) manpage:

In the case that the leading operator is =, and no list of capabilities is provided, the action-list is assumed to refer to all capabilities. For example, the following three clauses are equivalent to each
other (and indicate a completely empty capability set): all=; =;
cap_chown,<every-other-capability>=.

Such a binary can do whatever it pleases. Notice that this is only a "gotcha" of the textual representation used by libpcap: in the security.capability extended attribute of the file for which getcap will print /file/path =ep, all the meaningful bits are effectively on; for an empty security.capability, /file/path = (with the = not followed by anything) will be returned instead.

share|improve this answer

edited 1 hour ago

answered 1 hour ago

mosvymosvy

10.9k11340

add a comment | 

4

# getcap ./some_bin

./some_bin =ep

That file has ALL the capabilites set in the effective(e) and permitted(p) set.

In the textual representation of capabilities, a leading = is equivalent to all=.
From the cap_to_text(3) manpage:

In the case that the leading operator is =, and no list of capabilities is provided, the action-list is assumed to refer to all capabilities. For example, the following three clauses are equivalent to each
other (and indicate a completely empty capability set): all=; =;
cap_chown,<every-other-capability>=.

Such a binary can do whatever it pleases. Notice that this is only a "gotcha" of the textual representation used by libpcap: in the security.capability extended attribute of the file for which getcap will print /file/path =ep, all the meaningful bits are effectively on; for an empty security.capability, /file/path = (with the = not followed by anything) will be returned instead.

share|improve this answer

edited 1 hour ago

answered 1 hour ago

mosvymosvy

10.9k11340

add a comment | 

# getcap ./some_bin

./some_bin =ep

That file has ALL the capabilites set in the effective(e) and permitted(p) set.

In the textual representation of capabilities, a leading = is equivalent to all=.
From the cap_to_text(3) manpage:

In the case that the leading operator is =, and no list of capabilities is provided, the action-list is assumed to refer to all capabilities. For example, the following three clauses are equivalent to each
other (and indicate a completely empty capability set): all=; =;
cap_chown,<every-other-capability>=.

Such a binary can do whatever it pleases. Notice that this is only a "gotcha" of the textual representation used by libpcap: in the security.capability extended attribute of the file for which getcap will print /file/path =ep, all the meaningful bits are effectively on; for an empty security.capability, /file/path = (with the = not followed by anything) will be returned instead.

share|improve this answer

edited 1 hour ago

answered 1 hour ago

mosvymosvy

10.9k11340

share|improve this answer

edited 1 hour ago

answered 1 hour ago

mosvymosvy

10.9k11340

answered 1 hour ago

mosvymosvy

10.9k11340

answered 1 hour ago

mosvymosvy

10.9k11340

5

The capabilities are put in the permitted set (p), and all permitted capabilities are copied into the effective set (e). There does not seem to be any capabilities in your example (where did you get it from?).

The e is used for legacy programs (possibly most programs at the current time), that is programs that don't know about capabilities, so can not them-selves copy capabilities from permitted to effective.

share|improve this answer

answered 2 hours ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

add a comment | 

5

The capabilities are put in the permitted set (p), and all permitted capabilities are copied into the effective set (e). There does not seem to be any capabilities in your example (where did you get it from?).

The e is used for legacy programs (possibly most programs at the current time), that is programs that don't know about capabilities, so can not them-selves copy capabilities from permitted to effective.

share|improve this answer

answered 2 hours ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

add a comment | 

The capabilities are put in the permitted set (p), and all permitted capabilities are copied into the effective set (e). There does not seem to be any capabilities in your example (where did you get it from?).

The e is used for legacy programs (possibly most programs at the current time), that is programs that don't know about capabilities, so can not them-selves copy capabilities from permitted to effective.

share|improve this answer

answered 2 hours ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

share|improve this answer

answered 2 hours ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

answered 2 hours ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

answered 2 hours ago

ctrl-alt-delorctrl-alt-delor

12.7k52663