Linux Certif

Toute la documentation sur la certification Linux LPI

krgcapset

NAME

krgcapset - Set or modify capabilities of a process.

SYNOPSIS

krg_capset [-s] {{[-e] | [-p] | [-i] | [-d]} [[+] | [-]] | {cap_list...}} {{[-E] | [-P] | [-I] | [-D]} | {value...}}

DESCRIPTION

Kerrighed provides a system of capabilities, which allows administrator and users to define the way their processes behave in term of SSI mechanisms. Kerrighed cluster wide mechanisms are divided into distinct units that can be independently enabled and disabled. Each process has four capability sets:

•Effective,

•Permitted,

•Inheritable Permited

•Inheritable Effective.

See krg_capabilities(7) for further details. krg_capset modify calling process capabilities.

OPTIONS

-e

Set up effective capabilities using symbolic names.

-p

Set up permitted capabilities using symbolic names.

-i

Set up inheritable permitted capabilities using symbolic names.

-d

Set up inheritable effective capabilities using symbolic names.

-E

Set up effective capabilities using octal value.

-P

Set up permitted capabilities using octal value.

-I

Set up inheritable permitted capabilities using octal value.

-D

Set up inheritable effective capabilities using octal value.

-s

Show the capabilities of the calling process.

-f

Do not ask for confirmation when removing CHANGE_KERRIGHED_CAP.

EXAMPLES

krg_capset -s

Show capabilities of the calling process.

krg_capset -e +CAN_MIGRATE

Add the "CAN_MIGRATE" effective capability to the calling process.

krg_capset -e -CAN_MIGRATE

Remove the "CAN_MIGRATE" effective capability to the calling process.

krg_capset -E 07

Set effective capabilities to CHANGE_KERRIGHED_CAP, USE_CONTAINERS, CAN_MIGRATE.

AUTHOR

Renaud Lottiaux <renaud.lottiaux@kerlabs.com>

SEE ALSO

kerrighed_capabilities(7)