What does the “ep” capability means?





.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ margin-bottom:0;
}







3















root@macine:~# getcap ./some_bin
./some_bin =ep


What does "ep" means? What are the capabilities of this binary?










share|improve this question









New contributor




James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
















  • 1





    capabilities(7) have nothing to do with selinux. That file has all possible capabilities set.

    – mosvy
    1 hour ago











  • vulp3cula.gitbook.io/hackers-grimoire/post-exploitation/…

    – Jesse_b
    1 hour ago











  • e Effective This means the capability is “activated”. p Permitted This means the capability can be used/is allowed.

    – αғsнιη
    1 hour ago




















3















root@macine:~# getcap ./some_bin
./some_bin =ep


What does "ep" means? What are the capabilities of this binary?










share|improve this question









New contributor




James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
















  • 1





    capabilities(7) have nothing to do with selinux. That file has all possible capabilities set.

    – mosvy
    1 hour ago











  • vulp3cula.gitbook.io/hackers-grimoire/post-exploitation/…

    – Jesse_b
    1 hour ago











  • e Effective This means the capability is “activated”. p Permitted This means the capability can be used/is allowed.

    – αғsнιη
    1 hour ago
















3












3








3








root@macine:~# getcap ./some_bin
./some_bin =ep


What does "ep" means? What are the capabilities of this binary?










share|improve this question









New contributor




James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.












root@macine:~# getcap ./some_bin
./some_bin =ep


What does "ep" means? What are the capabilities of this binary?







linux capabilities






share|improve this question









New contributor




James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.











share|improve this question









New contributor




James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









share|improve this question




share|improve this question








edited 1 hour ago









mosvy

10.8k11340




10.8k11340






New contributor




James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









asked 1 hour ago









JamesJames

182




182




New contributor




James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.





New contributor





James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.






James is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.








  • 1





    capabilities(7) have nothing to do with selinux. That file has all possible capabilities set.

    – mosvy
    1 hour ago











  • vulp3cula.gitbook.io/hackers-grimoire/post-exploitation/…

    – Jesse_b
    1 hour ago











  • e Effective This means the capability is “activated”. p Permitted This means the capability can be used/is allowed.

    – αғsнιη
    1 hour ago
















  • 1





    capabilities(7) have nothing to do with selinux. That file has all possible capabilities set.

    – mosvy
    1 hour ago











  • vulp3cula.gitbook.io/hackers-grimoire/post-exploitation/…

    – Jesse_b
    1 hour ago











  • e Effective This means the capability is “activated”. p Permitted This means the capability can be used/is allowed.

    – αғsнιη
    1 hour ago










1




1





capabilities(7) have nothing to do with selinux. That file has all possible capabilities set.

– mosvy
1 hour ago





capabilities(7) have nothing to do with selinux. That file has all possible capabilities set.

– mosvy
1 hour ago













vulp3cula.gitbook.io/hackers-grimoire/post-exploitation/…

– Jesse_b
1 hour ago





vulp3cula.gitbook.io/hackers-grimoire/post-exploitation/…

– Jesse_b
1 hour ago













e Effective This means the capability is “activated”. p Permitted This means the capability can be used/is allowed.

– αғsнιη
1 hour ago







e Effective This means the capability is “activated”. p Permitted This means the capability can be used/is allowed.

– αғsнιη
1 hour ago












2 Answers
2






active

oldest

votes


















2















# getcap ./some_bin
./some_bin =ep



That file has ALL the capabilites set in the effective(e) and permitted(p) set.



In the textual representation of capabilities, a leading = is equivalent to all=.
From the cap_to_text(3) manpage:




In the case that the leading operator is =, and no list of capabilities is provided, the action-list is assumed to refer to all capabilities. For example, the following three clauses are equivalent to each
other (and indicate a completely empty capability set): all=; =;
cap_chown,<every-other-capability>=.




Such a binary can do whatever it pleases. Notice that this is only a "gotcha" of the textual representation used by libpcap: in the security.capability extended attribute of the file for which getcap will print /file/path =ep, all the meaningful bits are effectively on; for an empty security.capability, /file/path = (with the = not followed by anything) will be returned instead.






share|improve this answer

































    2














    The capabilities are put in the permitted set (p), and all permitted capabilities are copied into the effective set (e). There does not seem to be any capabilities in your example (where did you get it from?).



    The e is used for legacy programs (possibly most programs at the current time), that is programs that don't know about capabilities, so can not them-selves copy capabilities from permitted to effective.






    share|improve this answer
























      Your Answer








      StackExchange.ready(function() {
      var channelOptions = {
      tags: "".split(" "),
      id: "106"
      };
      initTagRenderer("".split(" "), "".split(" "), channelOptions);

      StackExchange.using("externalEditor", function() {
      // Have to fire editor after snippets, if snippets enabled
      if (StackExchange.settings.snippets.snippetsEnabled) {
      StackExchange.using("snippets", function() {
      createEditor();
      });
      }
      else {
      createEditor();
      }
      });

      function createEditor() {
      StackExchange.prepareEditor({
      heartbeatType: 'answer',
      autoActivateHeartbeat: false,
      convertImagesToLinks: false,
      noModals: true,
      showLowRepImageUploadWarning: true,
      reputationToPostImages: null,
      bindNavPrevention: true,
      postfix: "",
      imageUploader: {
      brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
      contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
      allowUrls: true
      },
      onDemand: true,
      discardSelector: ".discard-answer"
      ,immediatelyShowMarkdownHelp:true
      });


      }
      });






      James is a new contributor. Be nice, and check out our Code of Conduct.










      draft saved

      draft discarded


















      StackExchange.ready(
      function () {
      StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f515881%2fwhat-does-the-ep-capability-means%23new-answer', 'question_page');
      }
      );

      Post as a guest















      Required, but never shown

























      2 Answers
      2






      active

      oldest

      votes








      2 Answers
      2






      active

      oldest

      votes









      active

      oldest

      votes






      active

      oldest

      votes









      2















      # getcap ./some_bin
      ./some_bin =ep



      That file has ALL the capabilites set in the effective(e) and permitted(p) set.



      In the textual representation of capabilities, a leading = is equivalent to all=.
      From the cap_to_text(3) manpage:




      In the case that the leading operator is =, and no list of capabilities is provided, the action-list is assumed to refer to all capabilities. For example, the following three clauses are equivalent to each
      other (and indicate a completely empty capability set): all=; =;
      cap_chown,<every-other-capability>=.




      Such a binary can do whatever it pleases. Notice that this is only a "gotcha" of the textual representation used by libpcap: in the security.capability extended attribute of the file for which getcap will print /file/path =ep, all the meaningful bits are effectively on; for an empty security.capability, /file/path = (with the = not followed by anything) will be returned instead.






      share|improve this answer






























        2















        # getcap ./some_bin
        ./some_bin =ep



        That file has ALL the capabilites set in the effective(e) and permitted(p) set.



        In the textual representation of capabilities, a leading = is equivalent to all=.
        From the cap_to_text(3) manpage:




        In the case that the leading operator is =, and no list of capabilities is provided, the action-list is assumed to refer to all capabilities. For example, the following three clauses are equivalent to each
        other (and indicate a completely empty capability set): all=; =;
        cap_chown,<every-other-capability>=.




        Such a binary can do whatever it pleases. Notice that this is only a "gotcha" of the textual representation used by libpcap: in the security.capability extended attribute of the file for which getcap will print /file/path =ep, all the meaningful bits are effectively on; for an empty security.capability, /file/path = (with the = not followed by anything) will be returned instead.






        share|improve this answer




























          2












          2








          2








          # getcap ./some_bin
          ./some_bin =ep



          That file has ALL the capabilites set in the effective(e) and permitted(p) set.



          In the textual representation of capabilities, a leading = is equivalent to all=.
          From the cap_to_text(3) manpage:




          In the case that the leading operator is =, and no list of capabilities is provided, the action-list is assumed to refer to all capabilities. For example, the following three clauses are equivalent to each
          other (and indicate a completely empty capability set): all=; =;
          cap_chown,<every-other-capability>=.




          Such a binary can do whatever it pleases. Notice that this is only a "gotcha" of the textual representation used by libpcap: in the security.capability extended attribute of the file for which getcap will print /file/path =ep, all the meaningful bits are effectively on; for an empty security.capability, /file/path = (with the = not followed by anything) will be returned instead.






          share|improve this answer
















          # getcap ./some_bin
          ./some_bin =ep



          That file has ALL the capabilites set in the effective(e) and permitted(p) set.



          In the textual representation of capabilities, a leading = is equivalent to all=.
          From the cap_to_text(3) manpage:




          In the case that the leading operator is =, and no list of capabilities is provided, the action-list is assumed to refer to all capabilities. For example, the following three clauses are equivalent to each
          other (and indicate a completely empty capability set): all=; =;
          cap_chown,<every-other-capability>=.




          Such a binary can do whatever it pleases. Notice that this is only a "gotcha" of the textual representation used by libpcap: in the security.capability extended attribute of the file for which getcap will print /file/path =ep, all the meaningful bits are effectively on; for an empty security.capability, /file/path = (with the = not followed by anything) will be returned instead.







          share|improve this answer














          share|improve this answer



          share|improve this answer








          edited 4 mins ago

























          answered 55 mins ago









          mosvymosvy

          10.8k11340




          10.8k11340

























              2














              The capabilities are put in the permitted set (p), and all permitted capabilities are copied into the effective set (e). There does not seem to be any capabilities in your example (where did you get it from?).



              The e is used for legacy programs (possibly most programs at the current time), that is programs that don't know about capabilities, so can not them-selves copy capabilities from permitted to effective.






              share|improve this answer




























                2














                The capabilities are put in the permitted set (p), and all permitted capabilities are copied into the effective set (e). There does not seem to be any capabilities in your example (where did you get it from?).



                The e is used for legacy programs (possibly most programs at the current time), that is programs that don't know about capabilities, so can not them-selves copy capabilities from permitted to effective.






                share|improve this answer


























                  2












                  2








                  2







                  The capabilities are put in the permitted set (p), and all permitted capabilities are copied into the effective set (e). There does not seem to be any capabilities in your example (where did you get it from?).



                  The e is used for legacy programs (possibly most programs at the current time), that is programs that don't know about capabilities, so can not them-selves copy capabilities from permitted to effective.






                  share|improve this answer













                  The capabilities are put in the permitted set (p), and all permitted capabilities are copied into the effective set (e). There does not seem to be any capabilities in your example (where did you get it from?).



                  The e is used for legacy programs (possibly most programs at the current time), that is programs that don't know about capabilities, so can not them-selves copy capabilities from permitted to effective.







                  share|improve this answer












                  share|improve this answer



                  share|improve this answer










                  answered 1 hour ago









                  ctrl-alt-delorctrl-alt-delor

                  12.7k52663




                  12.7k52663






















                      James is a new contributor. Be nice, and check out our Code of Conduct.










                      draft saved

                      draft discarded


















                      James is a new contributor. Be nice, and check out our Code of Conduct.













                      James is a new contributor. Be nice, and check out our Code of Conduct.












                      James is a new contributor. Be nice, and check out our Code of Conduct.
















                      Thanks for contributing an answer to Unix & Linux Stack Exchange!


                      • Please be sure to answer the question. Provide details and share your research!

                      But avoid



                      • Asking for help, clarification, or responding to other answers.

                      • Making statements based on opinion; back them up with references or personal experience.


                      To learn more, see our tips on writing great answers.




                      draft saved


                      draft discarded














                      StackExchange.ready(
                      function () {
                      StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f515881%2fwhat-does-the-ep-capability-means%23new-answer', 'question_page');
                      }
                      );

                      Post as a guest















                      Required, but never shown





















































                      Required, but never shown














                      Required, but never shown












                      Required, but never shown







                      Required, but never shown

































                      Required, but never shown














                      Required, but never shown












                      Required, but never shown







                      Required, but never shown







                      Popular posts from this blog

                      數位音樂下載

                      When can things happen in Etherscan, such as the picture below?

                      格利澤436b