1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
|
.\"
.\" $Id: capget.2,v 1.6 2000/01/12 03:01:24 nakano Exp $
.\" written by Andrew Morgan <morgan@linux.kernel.org>
.\" may be distributed as per GPL
.\" Modified by David A. Wheeler <dwheeler@ida.org>
.\"
.\" Japanese Version Copyright (c) 1999 HANATAKA Shinya
.\" all rights reserved.
.\" Translated Sun Dec 26 22:36:37 JST 1999
.\" by HANATAKA Shinya <hanataka@abyss.rim.or.jp>
.\"
.\"WORD: capability
.\"WORD: effective capability ͭʻ
.\"WORD: inheritable capabilit Ѿ
.\"WORD: permitted capabily Ĥ줿
.\"
.TH CAPGET 2 "9 Sept 1999" "Linux 2.2" "Linux Programmer's Manual"
.SH ̾
capget, capset \- ץλ(capability)/
.SH
.B #undef _POSIX_SOURCE
.br
.B #include <sys/capability.h>
.sp
.BI "int capget(cap_user_header_t " header ", cap_user_data_t " data );
.sp
.BI "int capset(cap_user_header_t " header ", const cap_user_data_t " data );
.SH
Linux 2.2 ǡѡ桼(root)θϤϡ줾̤
(capability)ؤʬ䤵졢νȤɽ褦ˤʤä
٤ƤΥץϡͭʻ(effective capability)νפ
ˤäƸߤɤ¹Բǽ̤Ǥ롣
ޤ٤ƤΥץ
.IR execve (2)
̤ơַѾ(inheritable capabilit)νפȡ
ΥץͭˤѾ褦ѹ뤳Ȥ
ֵĤ줿(permitted capabily)νפäƤ롣
.PP
Ĥδؿϻ(capability)ꤷꤹ뤿
ͥ륤եǤ롣Υƥॳ Linux ͭ
ȤΤߤʤ餺ͥ API ѹ뤫⤷줺
ؿλˡ(ä
.B cap_user_*_t
Ȥ)Ϥ줾ΥͥΥӥѹ뤫⤷ʤ
.sp
ܿΤ륤ե
.IR cap_set_proc (3)
.IR cap_get_proc (3)
Ǥ롣
ǽʤХץꥱˤϤδؿѤ٤Ǥ롣
ץꥱ Linux ĥѤˤϡñ
Ȥ륤եǤ
.IR capsetp (3)
.IR capgetp (3)
Ѥ٤Ǥ롣
.SH ֤
ˤϥ֤顼ξˤ -1 ֤
.I errno
Ŭڤꤹ롣
.SH 顼
.TP
.SB EINVAL
Τɤ줫̵Ǥ롣
.TP
.SB EPERM
ֵĤ줿ʤνפɲä褦ȤƤ뤫ޤ
ֵĤ줿ʤνפˤʤʤͭʻʤνפ
ַѾʤνפꤷ褦ȤƤ롣
.SH ɲþ
(capability)ꤷꤹ뵡ǽΤΰܿ
եϰʲǽ
.B libcap
饤֥ˤä:
.br
.B ftp://linux.kernel.org/pub/linux/libs/security/linux-privs
|
