Difference between file capability and process capability
Clash Royale CLAN TAG#URR8PPP
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;
I am trying to understand POSIX Capabilities. Sometimes, when reading the documentation they refer to file capabilities and sometimes to process capabilities.
What is the difference between file and process capabilities. What I understood is we assign capability to an executable by using setcap and then when it is running which is a process it will use that capabilities. Why additional process capabilities, as process is executable file in memory.
linux posix capabilities setcap
edited Mar 8 at 12:16
Rui F Ribeiro
41.9k1483142
asked Mar 8 at 10:34
md.jamalmd.jamal
1164
add a comment |
I am trying to understand POSIX Capabilities. Sometimes, when reading the documentation they refer to file capabilities and sometimes to process capabilities.
What is the difference between file and process capabilities. What I understood is we assign capability to an executable by using setcap and then when it is running which is a process it will use that capabilities. Why additional process capabilities, as process is executable file in memory.
linux posix capabilities setcap
edited Mar 8 at 12:16
Rui F Ribeiro
41.9k1483142
asked Mar 8 at 10:34
md.jamalmd.jamal
1164
add a comment |
I am trying to understand POSIX Capabilities. Sometimes, when reading the documentation they refer to file capabilities and sometimes to process capabilities.
What is the difference between file and process capabilities. What I understood is we assign capability to an executable by using setcap and then when it is running which is a process it will use that capabilities. Why additional process capabilities, as process is executable file in memory.
linux posix capabilities setcap
edited Mar 8 at 12:16
Rui F Ribeiro
41.9k1483142
asked Mar 8 at 10:34
md.jamalmd.jamal
1164
I am trying to understand POSIX Capabilities. Sometimes, when reading the documentation they refer to file capabilities and sometimes to process capabilities.
What is the difference between file and process capabilities. What I understood is we assign capability to an executable by using setcap and then when it is running which is a process it will use that capabilities. Why additional process capabilities, as process is executable file in memory.
linux posix capabilities setcap
linux posix capabilities setcap
edited Mar 8 at 12:16
Rui F Ribeiro
41.9k1483142
asked Mar 8 at 10:34
md.jamalmd.jamal
1164
edited Mar 8 at 12:16
Rui F Ribeiro
41.9k1483142
asked Mar 8 at 10:34
md.jamalmd.jamal
1164
edited Mar 8 at 12:16
Rui F Ribeiro
41.9k1483142
edited Mar 8 at 12:16
Rui F Ribeiro
41.9k1483142
edited Mar 8 at 12:16
Rui F Ribeiro
41.9k1483142
41.9k1483142
asked Mar 8 at 10:34
md.jamalmd.jamal
1164
asked Mar 8 at 10:34
md.jamalmd.jamal
1164
asked Mar 8 at 10:34
md.jamalmd.jamal
1164
1164
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
File capabilities are set on an executable file with setcap.
But other capabilities can be inherited from the launching process. This is described in the Linux capabilites man page:
Inheritable
This is a set of capabilities preserved across an execve(2).
Inheritable capabilities remain inheritable when executing any
program, and inheritable capabilities are added to the
permitted set when executing a program that has the
corresponding bits set in the file inheritable set.
answered Mar 17 at 21:28
Ortomala LokniOrtomala Lokni
2,26511543
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f505104%2fdifference-between-file-capability-and-process-capability%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
File capabilities are set on an executable file with setcap.
But other capabilities can be inherited from the launching process. This is described in the Linux capabilites man page:
Inheritable
This is a set of capabilities preserved across an execve(2).
Inheritable capabilities remain inheritable when executing any
program, and inheritable capabilities are added to the
permitted set when executing a program that has the
corresponding bits set in the file inheritable set.
answered Mar 17 at 21:28
Ortomala LokniOrtomala Lokni
2,26511543
add a comment |
File capabilities are set on an executable file with setcap.
But other capabilities can be inherited from the launching process. This is described in the Linux capabilites man page:
Inheritable
This is a set of capabilities preserved across an execve(2).
Inheritable capabilities remain inheritable when executing any
program, and inheritable capabilities are added to the
permitted set when executing a program that has the
corresponding bits set in the file inheritable set.
answered Mar 17 at 21:28
Ortomala LokniOrtomala Lokni
2,26511543
add a comment |
File capabilities are set on an executable file with setcap.
But other capabilities can be inherited from the launching process. This is described in the Linux capabilites man page:
Inheritable
This is a set of capabilities preserved across an execve(2).
Inheritable capabilities remain inheritable when executing any
program, and inheritable capabilities are added to the
permitted set when executing a program that has the
corresponding bits set in the file inheritable set.
answered Mar 17 at 21:28
Ortomala LokniOrtomala Lokni
2,26511543
File capabilities are set on an executable file with setcap.
But other capabilities can be inherited from the launching process. This is described in the Linux capabilites man page:
Inheritable
This is a set of capabilities preserved across an execve(2).
Inheritable capabilities remain inheritable when executing any
program, and inheritable capabilities are added to the
permitted set when executing a program that has the
corresponding bits set in the file inheritable set.
answered Mar 17 at 21:28
Ortomala LokniOrtomala Lokni
2,26511543
edited Mar 17 at 21:35
answered Mar 17 at 21:28
Ortomala LokniOrtomala Lokni
2,26511543
answered Mar 17 at 21:28
Ortomala LokniOrtomala Lokni
2,26511543
answered Mar 17 at 21:28
Ortomala LokniOrtomala Lokni
2,26511543
2,26511543
add a comment |
add a comment |
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f505104%2fdifference-between-file-capability-and-process-capability%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
