Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with capabilities
Search options questions only
not deleted
user 181365
A capability is a set of access rights granted to a subject, often transferable. Capabilities are a method for access control.
0
votes
1
answer
480
views
Capabilities DROP in container of Kubernetes pod running with specific UID
I am doing some security research on Kubernetes and I found something still mysterious to me, concerning capabilities. … :
add: ["SETUID"]
name: httpd
restartPolicy: Always
But, when I checked the capabilities, here what I get:
cat /proc/1/status | grep Cap
CapInh: 0000000000000000
CapPrm: 0000000000000000 …
- 205
5
votes
1
answer
2k
views
Explanation of capabilities: CAP_NET_BIND_SERVICE
gid=1000(seb) groupes=1000(seb),4(adm),20(dialout),24(cdrom),25(floppy),27(sudo),29(audio),30(dip),44(video),46(plugdev),109(netdev),113(bluetooth),120(scanner),138(wireshark),141(kaboxer)```
Current capabilities … Capabilities of the launched process:
❯ cat /proc/15669/status | grep Cap
CapInh: 0000000000000000
CapPrm: 0000000000000000
CapEff: 0000000000000000
CapBnd: 000001ffffffffff
CapAmb: 0000000000000000
strace …
- 205