Does every syscall require at most 1 capability on Linux?

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP











up vote
1
down vote

favorite
1












I am trying to understand the relationship between capabilities and syscalls on Linux.



As far as I know, the capabilities of a process are only ever considered when that process calls a syscall. When some syscalls are called with certain arguments, the syscall will only succeed when that process has certain capabilities.



Is it the case that for a particular syscall with particular arguments to succeed only one capability will ever be required? Or do some syscalls require multiple capabilities when called with a particular set of (or any) arguments?










share|improve this question

























    up vote
    1
    down vote

    favorite
    1












    I am trying to understand the relationship between capabilities and syscalls on Linux.



    As far as I know, the capabilities of a process are only ever considered when that process calls a syscall. When some syscalls are called with certain arguments, the syscall will only succeed when that process has certain capabilities.



    Is it the case that for a particular syscall with particular arguments to succeed only one capability will ever be required? Or do some syscalls require multiple capabilities when called with a particular set of (or any) arguments?










    share|improve this question























      up vote
      1
      down vote

      favorite
      1









      up vote
      1
      down vote

      favorite
      1






      1





      I am trying to understand the relationship between capabilities and syscalls on Linux.



      As far as I know, the capabilities of a process are only ever considered when that process calls a syscall. When some syscalls are called with certain arguments, the syscall will only succeed when that process has certain capabilities.



      Is it the case that for a particular syscall with particular arguments to succeed only one capability will ever be required? Or do some syscalls require multiple capabilities when called with a particular set of (or any) arguments?










      share|improve this question













      I am trying to understand the relationship between capabilities and syscalls on Linux.



      As far as I know, the capabilities of a process are only ever considered when that process calls a syscall. When some syscalls are called with certain arguments, the syscall will only succeed when that process has certain capabilities.



      Is it the case that for a particular syscall with particular arguments to succeed only one capability will ever be required? Or do some syscalls require multiple capabilities when called with a particular set of (or any) arguments?







      linux kernel linux-kernel capabilities syscalls






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Nov 20 at 22:32









      dippynark

      1345




      1345

























          active

          oldest

          votes











          Your Answer








          StackExchange.ready(function()
          var channelOptions =
          tags: "".split(" "),
          id: "106"
          ;
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function()
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled)
          StackExchange.using("snippets", function()
          createEditor();
          );

          else
          createEditor();

          );

          function createEditor()
          StackExchange.prepareEditor(
          heartbeatType: 'answer',
          convertImagesToLinks: false,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: null,
          bindNavPrevention: true,
          postfix: "",
          imageUploader:
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          ,
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          );



          );













           

          draft saved


          draft discarded


















          StackExchange.ready(
          function ()
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f483084%2fdoes-every-syscall-require-at-most-1-capability-on-linux%23new-answer', 'question_page');

          );

          Post as a guest















          Required, but never shown






























          active

          oldest

          votes













          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes















           

          draft saved


          draft discarded















































           


          draft saved


          draft discarded














          StackExchange.ready(
          function ()
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f483084%2fdoes-every-syscall-require-at-most-1-capability-on-linux%23new-answer', 'question_page');

          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown






          Popular posts from this blog

          How to check contact read email or not when send email to Individual?

          Bahrain

          Postfix configuration issue with fips on centos 7; mailgun relay