Mdtryhht

How to stop co-workers from teasing me because I know Russian?

555 timer FM transmitter

Examples of subgroups where it's nontrivial to show closure under multiplication?

Are Boeing 737-800’s grounded?

Is there an official tutorial for installing Ubuntu 18.04+ on a device with an SSD and an additional internal hard drive?

Does holding a wand and speaking its command word count as V/S/M spell components?

Which big number is bigger?

Is the claim "Employers won't employ people with no 'social media presence'" realistic?

What is Niska's accent?

Why does processed meat contain preservatives, while canned fish needs not?

Don’t seats that recline flat defeat the purpose of having seatbelts?

Pulling the rope with one hand is as heavy as with two hands?

Contradiction proof for inequality of P and NP?

Mjolnir's timeline from Thor's perspective

What are the potential pitfalls when using metals as a currency?

Why other Westeros houses don't use wildfire?

To say I met a person for the first time

Size of electromagnet needed to replicate Earth's magnetic field

Real-world applications of fields, rings and groups in linear algebra.

Combinable filters

Phrase for the opposite of "foolproof"

Seemingly unused edef prior to an ifx mysteriously affects the outcome of the ifx. Why?

What's the polite way to say "I need to urinate"?

Is there a way to get a compiler for the original B programming language?

What does the “ep” capability means?

Unable to set capability CAP_SETFCAP by userFedora 14 root missing capabilityHow do I use capsh: I am trying to run an unprivileged ping, with minimal capabilitiesWhat does ` in Linux means?Granting service specific capabilitiesDoes every syscall require at most 1 capability on Linux?Better use ACL or Capability to let users start a service?Does a process that have the root user always have all of the capabilities available in Linux?Does macOS and Solaris have “capabilities”?Difference between file capability and process capability

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;

2

root@macine:~# getcap ./some_bin
./some_bin =ep

What does "ep" means? What are the capabilities of this binary?

linux capabilities

share|improve this question

edited 1 hour ago

mosvy

10.8k11340

asked 1 hour ago

JamesJames

132

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  capabilities(7) have nothing to do with selinux. That file has all possible capabilities set.
  
  – mosvy
  1 hour ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  vulp3cula.gitbook.io/hackers-grimoire/post-exploitation/…
  
  – Jesse_b
  1 hour ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  e Effective This means the capability is “activated”. p Permitted This means the capability can be used/is allowed.
  
  – αғsнιη
  1 hour ago
  
  

  
  
  
  

add a comment | 

2

root@macine:~# getcap ./some_bin
./some_bin =ep

What does "ep" means? What are the capabilities of this binary?

linux capabilities

share|improve this question

edited 1 hour ago

mosvy

10.8k11340

asked 1 hour ago

JamesJames

132

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  capabilities(7) have nothing to do with selinux. That file has all possible capabilities set.
  
  – mosvy
  1 hour ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  vulp3cula.gitbook.io/hackers-grimoire/post-exploitation/…
  
  – Jesse_b
  1 hour ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  e Effective This means the capability is “activated”. p Permitted This means the capability can be used/is allowed.
  
  – αғsнιη
  1 hour ago
  
  

  
  
  
  

add a comment | 

root@macine:~# getcap ./some_bin
./some_bin =ep

What does "ep" means? What are the capabilities of this binary?

linux capabilities

share|improve this question

edited 1 hour ago

mosvy

10.8k11340

asked 1 hour ago

JamesJames

132

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

root@macine:~# getcap ./some_bin
./some_bin =ep

share|improve this question

edited 1 hour ago

mosvy

10.8k11340

asked 1 hour ago

JamesJames

132

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share|improve this question

edited 1 hour ago

mosvy

10.8k11340

asked 1 hour ago

JamesJames

132

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

edited 1 hour ago

mosvy

10.8k11340

edited 1 hour ago

mosvy

10.8k11340

asked 1 hour ago

JamesJames

132

New contributor

James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked 1 hour ago

JamesJames

132

2 Answers
2

active

oldest

votes

1

# getcap ./some_bin
./some_bin =ep

That file has ALL the capabilites set in the effective(e) and permitted(p) set.

In the textual representation of capabilities, a leading = is equivalent to all=.
From the cap_to_text(3) manpage:

In the case that the leading operator is =, and no list of capabilities is provided, the action-list is assumed to refer to all capabilities. For example, the following three clauses are equivalent to each
other (and indicate a completely empty capability set): all=; =;
cap_chown,<every-other-capability>=.

share|improve this answer

answered 36 mins ago

mosvymosvy

10.8k11340

add a comment | 

1

The capabilities are put in the permitted set (p), and all permitted capabilities are copied into the effective set (e). There does not seem to be any capabilities in your example (where did you get it from?).

The e is used for legacy programs (possibly most programs at the current time), that is programs that don't know about capabilities, so can not them-selves copy capabilities from permitted to effective.

share|improve this answer

answered 57 mins ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

add a comment | 

Your Answer

StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);

James is a new contributor. Be nice, and check out our Code of Conduct.

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f515881%2fwhat-does-the-ep-capability-means%23new-answer', 'question_page');

);

Post as a guest

Name

Email

Required, but never shown

1

# getcap ./some_bin
./some_bin =ep

That file has ALL the capabilites set in the effective(e) and permitted(p) set.

In the textual representation of capabilities, a leading = is equivalent to all=.
From the cap_to_text(3) manpage:

In the case that the leading operator is =, and no list of capabilities is provided, the action-list is assumed to refer to all capabilities. For example, the following three clauses are equivalent to each
other (and indicate a completely empty capability set): all=; =;
cap_chown,<every-other-capability>=.

share|improve this answer

answered 36 mins ago

mosvymosvy

10.8k11340

add a comment | 

1

# getcap ./some_bin
./some_bin =ep

That file has ALL the capabilites set in the effective(e) and permitted(p) set.

In the textual representation of capabilities, a leading = is equivalent to all=.
From the cap_to_text(3) manpage:

In the case that the leading operator is =, and no list of capabilities is provided, the action-list is assumed to refer to all capabilities. For example, the following three clauses are equivalent to each
other (and indicate a completely empty capability set): all=; =;
cap_chown,<every-other-capability>=.

share|improve this answer

answered 36 mins ago

mosvymosvy

10.8k11340

add a comment | 

# getcap ./some_bin
./some_bin =ep

That file has ALL the capabilites set in the effective(e) and permitted(p) set.

In the textual representation of capabilities, a leading = is equivalent to all=.
From the cap_to_text(3) manpage:

In the case that the leading operator is =, and no list of capabilities is provided, the action-list is assumed to refer to all capabilities. For example, the following three clauses are equivalent to each
other (and indicate a completely empty capability set): all=; =;
cap_chown,<every-other-capability>=.

share|improve this answer

answered 36 mins ago

mosvymosvy

10.8k11340

share|improve this answer

answered 36 mins ago

mosvymosvy

10.8k11340

answered 36 mins ago

mosvymosvy

10.8k11340

answered 36 mins ago

mosvymosvy

10.8k11340

1

The capabilities are put in the permitted set (p), and all permitted capabilities are copied into the effective set (e). There does not seem to be any capabilities in your example (where did you get it from?).

The e is used for legacy programs (possibly most programs at the current time), that is programs that don't know about capabilities, so can not them-selves copy capabilities from permitted to effective.

share|improve this answer

answered 57 mins ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

add a comment | 

1

The capabilities are put in the permitted set (p), and all permitted capabilities are copied into the effective set (e). There does not seem to be any capabilities in your example (where did you get it from?).

The e is used for legacy programs (possibly most programs at the current time), that is programs that don't know about capabilities, so can not them-selves copy capabilities from permitted to effective.

share|improve this answer

answered 57 mins ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

add a comment | 

The capabilities are put in the permitted set (p), and all permitted capabilities are copied into the effective set (e). There does not seem to be any capabilities in your example (where did you get it from?).

The e is used for legacy programs (possibly most programs at the current time), that is programs that don't know about capabilities, so can not them-selves copy capabilities from permitted to effective.

share|improve this answer

answered 57 mins ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

share|improve this answer

answered 57 mins ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

answered 57 mins ago

ctrl-alt-delorctrl-alt-delor

12.7k52663

answered 57 mins ago

ctrl-alt-delorctrl-alt-delor

12.7k52663