|SETCAP(8)||System Manager's Manual||SETCAP(8)|
The capabilities are specified in the form described in cap_from_text(3).
The special capability string, '-', can be used to indicate that capabilities are read from the standard input. In such cases, the capability set is terminated with a blank line.
The special capability string, '-r', is used to remove a capability set from a file. Note, setting an empty capability set is not the same as removing it. An empty set can be used to guarantee a file is not executed with privilege inspite of the fact that the prevailing ambient+inheritable sets would otherwise bestow capabilities on executed binaries.
The -q flag is used to make the program less verbose in its output.
|11 September 2018|