man lcap (Administration système) - remove Linux kernel capabilities
NAME
lcap - remove Linux kernel capabilities
SYNOPSIS
lcap
[-h]
lcap
[-v[v]] -c capability
lcap
[-v[v]] [-z] capability ...
DESCRIPTION
This manual page documents lcap. lcap removes "capabilities" from the Linux kernel (2.2.11 and greater).
OPTIONS
Without any command line options, lcap will display all the capability bits and their current setting. A * before the capability means the bit is set (to one). The lack of a * means the bit is unset (set to zero).
- -h
- Display the help message.
- -v
- Show lots of information.
- -vv
- Show even more information.
- -c
- Check if capability is set. If the capability's bit is set, the return code is greater than zero. If the capability's is not set, the return code is zero.
- -z
- Set all capability bits to zero except for the capabilities listed on the command line.
Without the -z option, the capability bit is set to zero. All other bits are left as is. Multiple capabilities may be listed on the command line (except when using the -c option, in which case only one capability may be specified).
REPORTING BUGS
Report bugs to <spoon@ix.netcom.com>.
AUTHOR
spoon <spoon@ix.netcom.com>
COPYRIGHT
Copyright (C) 1999-2000 spoon@ix.netcom.com