|
NAME | SYNOPSIS | DESCRIPTION | EXIT STATUS | REPORTING BUGS | SEE ALSO | AUTHOR | COLOPHON |
|
|
|
CAPTREE(8) System Manager's Manual CAPTREE(8)
captree - display tree of process capabilities
captree [OPTIONS] [(pid|glob-name) ...]
captree displays the capabilities on the mentioned processes
indicated by pid or glob-name value(s) given on the command line.
If no pid etc values are supplied, pid=1 is implied. A pid value
of 0 displays all the processes known to the kernel.
The POSIX.1e capabilities are displayed in double quotes in the
cap_from_text(3) format. The IAB tuple of capabilities is
displayed between square brackets in the text format described in
cap_iab(3). Both of these text formats are described in
cap_text_formats(7). Note, the IAB tuple text is omitted if it
contains empty A and B components. This is because the regular
POSIX.1e text contains information about the Inheritable flag
already. This behavior can be overridden with the --verbose
command line argument.
Optional arguments (which must precede the list of pid|glob-name
values):
--help Displays usage information and exits. Note, modern Go
runtimes exit with status 0 in this case, but older
runtimes exit with status 2.
--verbose
Displays capability sets and IAB tuples even when they are
empty, or redundant.
--depth=n
Displays the process tree to a depth of n. Note, the
default value for this parameter is 0, which implies
infinite depth.
--colo[u]r=false
Colo[u]rs the targeted PIDs, if stdout is a TTY, in red.
This option defaults to true when running via a TTY. The
--color=false argument will suppress this color. Piping the
output into some other program will also suppress the use
of colo[u]r.
If the supplied target cannot be found the exit status is 1.
Should an unrecognized option be provided, the exit status is 2.
Otherwise, captree exits with status 0.
Please report bugs via:
https://bugzilla.kernel.org/buglist.cgi?component=libcap&list_id=1090757
cap_from_text(3), cap_text_formats(7), capabilities(7), and
cap_iab(3).
There is a longer article about captree, which includes some
examples, here:
https://sites.google.com/site/fullycapable/captree
Andrew G. Morgan <morgan@kernel.org>
This page is part of the libcap (capabilities commands and
library) project. Information about the project can be found at
⟨https://git.kernel.org/pub/scm/libs/libcap/libcap.git/⟩. If you
have a bug report for this manual page, send it to
morgan@kernel.org (please put "libcap" in the Subject line). This
page was obtained from the project's upstream Git repository
⟨https://git.kernel.org/pub/scm/libs/libcap/libcap.git/⟩ on
2025-08-11. (At that time, the date of the most recent commit
that was found in the repository was 2025-08-10.) If you discover
any rendering problems in this HTML version of the page, or you
believe there is a better or more up-to-date source for the page,
or you have corrections or improvements to the information in this
COLOPHON (which is not part of the original manual page), send a
mail to man-pages@man7.org
2022-03-19 CAPTREE(8)
Pages that refer to this page: capsh(1), libcap(3), cap_text_formats(7), getcap(8), getpcaps(8), setcap(8)