Capabilities

The Linux capabilities feature breaks up the privileges available to processes run as the root user into smaller groups of privileges.

This way a process running with root privilege can be limited to get only the minimal permissions it needs to perform its operation.

https://blog.container-solutions.com/linux-capabilities-in-practice

https://book.hacktricks.xyz/linux-hardening/privilege-escalation/linux-capabilities

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux_atomic_host/7/html/container_security_guide/linux_capabilities_and_seccomp


Permissions


🌱 Back to Garden