Bug 449988

Summary:	setcap documentation
Product:	[Fedora] Fedora	Reporter:	Peter Vrabec <pvrabec>
Component:	libcap	Assignee:	Karsten Hopp <karsten>
Status:	CLOSED WONTFIX	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	low	Docs Contact:
Priority:	low
Version:	rawhide	CC:	dkopecek, mvpel
Target Milestone:	---	Keywords:	FutureFeature
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Enhancement
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-06-12 10:39:03 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	449984

Description Peter Vrabec 2008-06-04 16:30:10 UTC

Description of problem:

man setcap should be improved. It needs:
 * explanation and examples of both adding and removing capabilities
 * guidance about how to set the capabilities so that they are not 
passed to child processes
 * big warning about inheritance
 * mention that chown removes capabilities
 * mention how mount suid/nosuid affects capabilities

Comment 1 Daniel Kopeček 2008-07-08 15:28:46 UTC

* Describe setcap options (-q, -r #454438).

Comment 2 Karsten Hopp 2015-06-12 10:39:03 UTC

I've left this open with the intention of fixing it when I have some spare time. It doesn't look like that will happen anytime soon, sorry.