Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Add support for POSIX 1003.1e capabilities #1219

Open
ralphm opened this issue Nov 5, 2024 · 0 comments
Open

feat: Add support for POSIX 1003.1e capabilities #1219

ralphm opened this issue Nov 5, 2024 · 0 comments

Comments

@ralphm
Copy link

ralphm commented Nov 5, 2024

From the archlinux wiki:

Capabilities (POSIX 1003.1e, capabilities(7)) provide fine-grained control over superuser permissions, allowing use of the root user to be avoided.
[..]
Capabilities are implemented on Linux using extended attributes (xattr(7)) in the security namespace.

Currently, when using -@, you get:

/usr/libexec/netdata/plugins.d$ ls -al@ apps.plugin
.rwxr-x---@ 567k root  5 Nov 01:27  apps.plugin
                                   └── security.capability: "\u{1}\0\0\u{2}\u{4}\0\u{8}\0\u{4}\0\u{8}"

Decoding this using getcap yields:

/usr/libexec/netdata/plugins.d$ getcap apps.plugin
apps.plugin cap_dac_read_search,cap_sys_ptrace=eip

It would be nice if eza could decode the capabilities, and show this as follows (possibly by a new flag):

.rwxr-x---@ 567k root  5 Nov 01:27  apps.plugin
                                   └── security.capability: cap_dac_read_search,cap_sys_ptrace=eip
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant