Beyond Linux® From Scratch - Version 2012-01-16

Chapter 4. Security

libcap2-2.22

Introduction to libcap2

The libcap2 package implements the user-space interfaces to the POSIX 1003.1e capabilities available in Linux kernels. These capabilities are a partitioning of the all powerful root privilege into a set of distinct privileges.

This package is known to build and work properly using an LFS-7.0 platform.

Package Information

libcap2 Dependencies

Required

attr-2.4.44

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libcap2

Installation of libcap2

Install libcap2 by running the following commands: 

make

This package does not come with a test suite.

Now, as the root user: 

make RAISE_SETFCAP=no install

Command Explanations

RAISE_SETFCAP=no: This parameter skips trying to use setcap on itself. This avoids an installation error if the kernel or file system do not support extended capabilities.

Contents

Installed Programs: capsh, getcap, getpcaps, and setcap
Installed Library: libcap.{so,a}
Installed Directories: None

Short Descriptions

capsh

is a shell wrapper to exploredand constraine capability support.

getcap

examines file capabilities.

getpcaps

displays the capabilities on the queried process(es).

setcap

sets file file capabilities.

libcap2.{so,a}

contains the libcap2 API functions.

Last updated on 2011-10-24 22:31:31 -0500