Vjylku

What is Niska's accent?

Will tsunami waves travel forever if there was no land?

What does "vanity" mean in "the creature was made subject to vanity", Romans 8:20?

What makes accurate emulation of old systems a difficult task?

What are the potential pitfalls when using metals as a currency?

Why is it that the natural deduction method can't test for invalidity?

What term is being referred to with "reflected-sound-of-underground-spirits"?

Checks user level and limit the data before saving it to mongoDB

Is there a way to get a compiler for the original B programming language?

Why other Westeros houses don't use wildfire?

How did Captain America manage to do this?

If a planet has 3 moons, is it possible to have triple Full/New Moons at once?

what is the sudo password for a --disabled-password user

Is this homebrew Wind Wave spell balanced?

Critique of timeline aesthetic

Mjolnir's timeline from Thor's perspective

Don’t seats that recline flat defeat the purpose of having seatbelts?

TIKZ - changing one block into parallel multiple blocks

How do I deal with a coworker that keeps asking to make small superficial changes to a report, and it is seriously triggering my anxiety?

Can we say “you can pay when the order gets ready”?

How would one muzzle a full grown polar bear in the 13th century?

Which big number is bigger?

How can Zone of Truth be defeated without the caster knowing?

How to solve constants out of the internal energy equation?

What does the “ep” capability means?

Unable to set capability CAP_SETFCAP by userFedora 14 root missing capabilityHow do I use capsh: I am trying to run an unprivileged ping, with minimal capabilitiesWhat does ` in Linux means?Granting service specific capabilitiesDoes every syscall require at most 1 capability on Linux?Better use ACL or Capability to let users start a service?Does a process that have the root user always have all of the capabilities available in Linux?Does macOS and Solaris have “capabilities”?Difference between file capability and process capability

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ margin-bottom:0;
}

2

root@macine:~# getcap ./some_bin

./some_bin =ep

What does "ep" means? What are the capabilities of this binary?

linux capabilities

share|improve this question

edited 47 mins ago

mosvy

10.8k11340

asked 1 hour ago

JamesJames

132

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  capabilities(7) have nothing to do with selinux. That file has all possible capabilities set.
  
  – mosvy
  47 mins ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  vulp3cula.gitbook.io/hackers-grimoire/post-exploitation/…
  
  – Jesse_b
  40 mins ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  e Effective This means the capability is “activated”. p Permitted This means the capability can be used/is allowed.
  
  – αғsнιη
  40 mins ago
  
  
  

  
  
  
  

add a comment | 

2

root@macine:~# getcap ./some_bin

./some_bin =ep

What does "ep" means? What are the capabilities of this binary?

linux capabilities

share|improve this question

edited 47 mins ago

mosvy

10.8k11340

asked 1 hour ago

JamesJames

132

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  capabilities(7) have nothing to do with selinux. That file has all possible capabilities set.
  
  – mosvy
  47 mins ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  vulp3cula.gitbook.io/hackers-grimoire/post-exploitation/…
  
  – Jesse_b
  40 mins ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  e Effective This means the capability is “activated”. p Permitted This means the capability can be used/is allowed.
  
  – αғsнιη
  40 mins ago
  
  
  

  
  
  
  

add a comment | 

root@macine:~# getcap ./some_bin

./some_bin =ep

What does "ep" means? What are the capabilities of this binary?

linux capabilities

share|improve this question

edited 47 mins ago

mosvy

10.8k11340

asked 1 hour ago

JamesJames

132

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

root@macine:~# getcap ./some_bin

./some_bin =ep

share|improve this question

edited 47 mins ago

mosvy

10.8k11340

asked 1 hour ago

JamesJames

132

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share|improve this question

edited 47 mins ago

mosvy

10.8k11340

asked 1 hour ago

JamesJames

132

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

edited 47 mins ago

mosvy

10.8k11340

edited 47 mins ago

mosvy

10.8k11340

asked 1 hour ago

JamesJames

132

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked 1 hour ago

JamesJames

132

2 Answers
2

active

oldest

votes

1

# getcap ./some_bin

./some_bin =ep

That file has ALL the capabilites set in the effective(e) and permitted(p) set.

In the textual representation of capabilities, a leading = is equivalent to all=.
From the cap_to_text(3) manpage:

In the case that the leading operator is =, and no list of capabilities is provided, the action-list is assumed to refer to all capabilities. For example, the following three clauses are equivalent to each
other (and indicate a completely empty capability set): all=; =;
cap_chown,<every-other-capability>=.

share|improve this answer

answered 14 mins ago

mosvymosvy

10.8k11340

add a comment | 

1

The capabilities are put in the permitted set (p), and all permitted capabilities are copied into the effective set (e). There does not seem to be any capabilities in your example (where did you get it from?).

The e is used for legacy programs (possibly most programs at the current time), that is programs that don't know about capabilities, so can not them-selves copy capabilities from permitted to effective.

share|improve this answer

answered 35 mins ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

add a comment | 

Your Answer

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});

James is a new contributor. Be nice, and check out our Code of Conduct.

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f515881%2fwhat-does-the-ep-capability-means%23new-answer', 'question_page');
}
);

Post as a guest

Name

Email

Required, but never shown

1

# getcap ./some_bin

./some_bin =ep

That file has ALL the capabilites set in the effective(e) and permitted(p) set.

In the textual representation of capabilities, a leading = is equivalent to all=.
From the cap_to_text(3) manpage:

In the case that the leading operator is =, and no list of capabilities is provided, the action-list is assumed to refer to all capabilities. For example, the following three clauses are equivalent to each
other (and indicate a completely empty capability set): all=; =;
cap_chown,<every-other-capability>=.

share|improve this answer

answered 14 mins ago

mosvymosvy

10.8k11340

add a comment | 

1

# getcap ./some_bin

./some_bin =ep

That file has ALL the capabilites set in the effective(e) and permitted(p) set.

In the textual representation of capabilities, a leading = is equivalent to all=.
From the cap_to_text(3) manpage:

In the case that the leading operator is =, and no list of capabilities is provided, the action-list is assumed to refer to all capabilities. For example, the following three clauses are equivalent to each
other (and indicate a completely empty capability set): all=; =;
cap_chown,<every-other-capability>=.

share|improve this answer

answered 14 mins ago

mosvymosvy

10.8k11340

add a comment | 

# getcap ./some_bin

./some_bin =ep

That file has ALL the capabilites set in the effective(e) and permitted(p) set.

In the textual representation of capabilities, a leading = is equivalent to all=.
From the cap_to_text(3) manpage:

In the case that the leading operator is =, and no list of capabilities is provided, the action-list is assumed to refer to all capabilities. For example, the following three clauses are equivalent to each
other (and indicate a completely empty capability set): all=; =;
cap_chown,<every-other-capability>=.

share|improve this answer

answered 14 mins ago

mosvymosvy

10.8k11340

share|improve this answer

answered 14 mins ago

mosvymosvy

10.8k11340

answered 14 mins ago

mosvymosvy

10.8k11340

answered 14 mins ago

mosvymosvy

10.8k11340

1

The capabilities are put in the permitted set (p), and all permitted capabilities are copied into the effective set (e). There does not seem to be any capabilities in your example (where did you get it from?).

The e is used for legacy programs (possibly most programs at the current time), that is programs that don't know about capabilities, so can not them-selves copy capabilities from permitted to effective.

share|improve this answer

answered 35 mins ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

add a comment | 

1

The capabilities are put in the permitted set (p), and all permitted capabilities are copied into the effective set (e). There does not seem to be any capabilities in your example (where did you get it from?).

The e is used for legacy programs (possibly most programs at the current time), that is programs that don't know about capabilities, so can not them-selves copy capabilities from permitted to effective.

share|improve this answer

answered 35 mins ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

add a comment | 

The capabilities are put in the permitted set (p), and all permitted capabilities are copied into the effective set (e). There does not seem to be any capabilities in your example (where did you get it from?).

The e is used for legacy programs (possibly most programs at the current time), that is programs that don't know about capabilities, so can not them-selves copy capabilities from permitted to effective.

share|improve this answer

answered 35 mins ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

share|improve this answer

answered 35 mins ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

answered 35 mins ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

answered 35 mins ago

ctrl-alt-delorctrl-alt-delor

12.7k52663