wok diff libcap-ng/description.txt @ rev 25382
updated unison (2.51.5 -> 2.52.1)
author | Hans-G?nter Theisgen |
---|---|
date | Sat Jul 30 17:15:58 2022 +0100 (2022-07-30) |
parents | |
children |
line diff
1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/libcap-ng/description.txt Sat Jul 30 17:15:58 2022 +0100 1.3 @@ -0,0 +1,15 @@ 1.4 +The libcap-ng library is intended to make programming with posix 1.5 +capabilities much easier than the traditional libcap library. 1.6 +It includes utilities that can analyse all currently running 1.7 +applications and print out any capabilities and whether or not it 1.8 +has an open ended bounding set. An open bounding set without the 1.9 +securebits "NOROOT" flag will allow full capabilities escalation 1.10 +for applications retaining uid 0 simply by calling execve. 1.11 + 1.12 +The included utilities are designed to let administrators and 1.13 +developers spot applications from various ways that may be running 1.14 +with too much privilege. For example, any investigation should 1.15 +start with network facing applications since they would be prime 1.16 +targets for intrusion. 1.17 +The netcap program will check all running applications and display 1.18 +the results.