wok-current diff libcap-ng/description.txt @ rev 25601
use gcc49-lib-base for openldap-dev
author | Stanislas Leduc <shann@slitaz.org> |
---|---|
date | Fri Sep 01 12:04:33 2023 +0000 (16 months ago) |
parents | |
children |
line diff
1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/libcap-ng/description.txt Fri Sep 01 12:04:33 2023 +0000 1.3 @@ -0,0 +1,15 @@ 1.4 +The libcap-ng library is intended to make programming with posix 1.5 +capabilities much easier than the traditional libcap library. 1.6 +It includes utilities that can analyse all currently running 1.7 +applications and print out any capabilities and whether or not it 1.8 +has an open ended bounding set. An open bounding set without the 1.9 +securebits "NOROOT" flag will allow full capabilities escalation 1.10 +for applications retaining uid 0 simply by calling execve. 1.11 + 1.12 +The included utilities are designed to let administrators and 1.13 +developers spot applications from various ways that may be running 1.14 +with too much privilege. For example, any investigation should 1.15 +start with network facing applications since they would be prime 1.16 +targets for intrusion. 1.17 +The netcap program will check all running applications and display 1.18 +the results.