filecap(8) — Linux manual page


FILECAP:(8)            System Administration Utilities           FILECAP:(8)

NAME         top

       filecap - a program to see capabilities

SYNOPSIS         top

       filecap [ -a | -d | /dir | /dir/file [cap1 cap2 ...] ]

DESCRIPTION         top

       filecap is a program that prints out a report of programs with file
       based capabilities. If a file is not in the report or there is no
       report at all, no capabilities were found. For expedience, the
       default is to check only the directories in the PATH environmental
       variable. If the -a command line option is given, then all
       directories will be checked. If a directory is passed, it will
       recursively check that directory. If a path to a file is given, it
       will only check that file. If a file is given followed by
       capabilities, then the capabilities are written to the file.

OPTIONS         top

       -a     This tells the program to show all capabilities starting from
              the / directory. Normally the PATH environmental variable is
              used to show you capabilities on files you are likely to

       -d     This dumps all capabilities for reference.

EXAMPLES         top

       To check file capabilities in $PATH:

       To check file capabilities of whole system:
       filecap -a

       To check file capabilities recursively in a directory:
       filecap /usr

       To check file capabilities of a specific program:
       filecap /bin/passwd

       To list all possible capabilities:
       filecap -d

       To set a file capability on a specific program:
       filecap /bin/ping net_raw net_admin

       To remove file capabilities on a specific program:
       filecap /bin/ping none

SEE ALSO         top

       pscap(8), netcap(8), capabilities(7).

AUTHOR         top

       Steve Grubb

COLOPHON         top

       This page is part of the libcap-ng (capabilities commands and library
       (NG)) project.  Information about the project can be found at 
       ⟨⟩.  It is not known how to
       report bugs for this man page; if you know, please send a mail to  This page was obtained from the tarball libcap-
       ng-0.8.tar.gz fetched from
       ⟨⟩ on
       2020-11-01.  If you discover any rendering problems in this HTML ver‐
       sion of the page, or you believe there is a better or more up-to-date
       source for the page, or you have corrections or improvements to the
       information in this COLOPHON (which is not part of the original man‐
       ual page), send a mail to

Red Hat                           Aug 2018                       FILECAP:(8)

Pages that refer to this page: capabilities(7)captest(8)netcap(8)pscap(8)